@guaracloud/cli 0.1.0

package/dist/commands/env/list.d.ts

@@ -0,0 +1,7 @@
+import { BaseCommand } from '../../lib/base-command.js';
+export default class EnvList extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    run(): Promise<void>;
+}
+//# sourceMappingURL=list.d.ts.map

package/dist/commands/env/list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../../src/commands/env/list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAoB,MAAM,2BAA2B,CAAC;AAG1E,MAAM,CAAC,OAAO,OAAO,OAAQ,SAAQ,WAAW;IAC9C,OAAgB,WAAW,SAA+C;IAE1E,OAAgB,QAAQ,WAItB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CA+B3B"}

package/dist/commands/env/list.js

@@ -0,0 +1,32 @@
+import { BaseCommand } from '../../lib/base-command.js';
+import { formatTable } from '../../lib/output.js';
+export default class EnvList extends BaseCommand {
+    static description = 'List environment variables for a service.';
+    static examples = [
+        '<%= config.bin %> env list --project my-project --service my-api',
+        '<%= config.bin %> env list --json',
+        '<%= config.bin %> env list --quiet',
+    ];
+    async run() {
+        const { flags } = await this.parse(EnvList);
+        const typedFlags = flags;
+        const client = await this.initApiClient(typedFlags);
+        const [projectId, serviceId] = await this.requireService(typedFlags, client);
+        const response = await client.getEnvVars(projectId, serviceId);
+        const variables = response.data.variables;
+        if (typedFlags.json) {
+            this.outputJson(variables);
+            return;
+        }
+        if (typedFlags.quiet) {
+            this.outputQuiet(variables.map((v) => v.key));
+            return;
+        }
+        if (variables.length === 0) {
+            this.log('No environment variables set. Add one with `guara env set KEY=value`.');
+            return;
+        }
+        this.log(formatTable(['Key', 'Value'], variables.map((v) => [v.key, v.value])));
+    }
+}
+//# sourceMappingURL=list.js.map

package/dist/commands/env/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../../src/commands/env/list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAoB,MAAM,2BAA2B,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAElD,MAAM,CAAC,OAAO,OAAO,OAAQ,SAAQ,WAAW;IAC9C,MAAM,CAAU,WAAW,GAAG,2CAA2C,CAAC;IAE1E,MAAM,CAAU,QAAQ,GAAG;QACzB,kEAAkE;QAClE,mCAAmC;QACnC,oCAAoC;KACrC,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,KAAoB,CAAC;QAExC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QACpD,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC7E,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;QAE1C,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;YACpB,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAC3B,OAAO;QACT,CAAC;QAED,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;YACrB,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QAED,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC,GAAG,CAAC,uEAAuE,CAAC,CAAC;YAClF,OAAO;QACT,CAAC;QAED,IAAI,CAAC,GAAG,CACN,WAAW,CACT,CAAC,KAAK,EAAE,OAAO,CAAC,EAChB,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CACvC,CACF,CAAC;IACJ,CAAC"}

package/dist/commands/env/set.d.ts

@@ -0,0 +1,18 @@
+import { BaseCommand } from '../../lib/base-command.js';
+export default class EnvSet extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static strict: boolean;
+    static flags: {
+        'from-file': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        quiet: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        'api-key': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'api-url': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        project: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        service: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        yes: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=set.d.ts.map

package/dist/commands/env/set.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"set.d.ts","sourceRoot":"","sources":["../../../src/commands/env/set.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,WAAW,EAAoB,MAAM,2BAA2B,CAAC;AAI1E,MAAM,CAAC,OAAO,OAAO,MAAO,SAAQ,WAAW;IAC7C,OAAgB,WAAW,SAA6D;IAExF,OAAgB,QAAQ,WAItB;IAEF,OAAgB,MAAM,UAAS;IAE/B,OAAgB,KAAK;;;;;;;;;MAKnB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAiE3B"}

package/dist/commands/env/set.js

@@ -0,0 +1,70 @@
+import { readFileSync } from 'node:fs';
+import { Flags } from '@oclif/core';
+import { BaseCommand } from '../../lib/base-command.js';
+import { CliError } from '../../lib/errors.js';
+import { successMessage } from '../../lib/output.js';
+export default class EnvSet extends BaseCommand {
+    static description = 'Set environment variables (triggers a rolling restart).';
+    static examples = [
+        '<%= config.bin %> env set KEY=value --project my-project --service my-api',
+        '<%= config.bin %> env set KEY1=value1 KEY2=value2',
+        '<%= config.bin %> env set --from-file .env',
+    ];
+    static strict = false;
+    static flags = {
+        ...BaseCommand.baseFlags,
+        'from-file': Flags.string({
+            description: 'Read KEY=VALUE pairs from a .env file.',
+        }),
+    };
+    async run() {
+        const { flags, argv } = await this.parse(EnvSet);
+        const typedFlags = flags;
+        const client = await this.initApiClient(typedFlags);
+        const [projectId, serviceId] = await this.requireService(typedFlags, client);
+        // ── Collect new variables ──────────────────────────────────────────────
+        const newVars = new Map();
+        if (typedFlags['from-file']) {
+            const content = readFileSync(typedFlags['from-file'], 'utf-8');
+            for (const line of content.split('\n')) {
+                const trimmed = line.trim();
+                if (!trimmed || trimmed.startsWith('#'))
+                    continue;
+                const eqIdx = trimmed.indexOf('=');
+                if (eqIdx === -1)
+                    continue;
+                newVars.set(trimmed.slice(0, eqIdx), trimmed.slice(eqIdx + 1));
+            }
+        }
+        for (const arg of argv) {
+            const eqIdx = arg.indexOf('=');
+            if (eqIdx === -1) {
+                throw new CliError(`Invalid format: "${arg}". Use KEY=value.`, 1, 'Each argument must be in KEY=value format, e.g. `guara env set PORT=3000`.');
+            }
+            newVars.set(arg.slice(0, eqIdx), arg.slice(eqIdx + 1));
+        }
+        if (newVars.size === 0) {
+            throw new CliError('No environment variables specified.', 1, 'Pass KEY=value arguments or use --from-file to load from a .env file.');
+        }
+        // ── Merge with existing vars ───────────────────────────────────────────
+        const { data: existing } = await client.getEnvVars(projectId, serviceId);
+        const merged = new Map(existing.variables.map((v) => [v.key, v.value]));
+        for (const [key, value] of newVars) {
+            merged.set(key, value);
+        }
+        await client.updateEnvVars(projectId, serviceId, {
+            variables: Array.from(merged.entries()).map(([key, value]) => ({ key, value })),
+        });
+        if (typedFlags.json) {
+            this.outputJson({ set: Array.from(newVars.keys()), total: merged.size });
+            return;
+        }
+        if (typedFlags.quiet) {
+            this.outputQuiet('ok');
+            return;
+        }
+        this.log(successMessage(`Set ${String(newVars.size)} environment variable(s).`));
+        this.log('  This triggers a rolling restart of the service.');
+    }
+}
+//# sourceMappingURL=set.js.map

package/dist/commands/env/set.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"set.js","sourceRoot":"","sources":["../../../src/commands/env/set.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEpC,OAAO,EAAE,WAAW,EAAoB,MAAM,2BAA2B,CAAC;AAC1E,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,MAAM,CAAC,OAAO,OAAO,MAAO,SAAQ,WAAW;IAC7C,MAAM,CAAU,WAAW,GAAG,yDAAyD,CAAC;IAExF,MAAM,CAAU,QAAQ,GAAG;QACzB,2EAA2E;QAC3E,mDAAmD;QACnD,4CAA4C;KAC7C,CAAC;IAEF,MAAM,CAAU,MAAM,GAAG,KAAK,CAAC;IAE/B,MAAM,CAAU,KAAK,GAAG;QACtB,GAAG,WAAW,CAAC,SAAS;QACxB,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC;YACxB,WAAW,EAAE,wCAAwC;SACtD,CAAC;KACH,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,KAA0D,CAAC;QAE9E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QACpD,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAE7E,0EAA0E;QAC1E,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;QAE1C,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,CAAC;YAC/D,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAClD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACnC,IAAI,KAAK,KAAK,CAAC,CAAC;oBAAE,SAAS;gBAC3B,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;QAED,KAAK,MAAM,GAAG,IAAI,IAAgB,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACjB,MAAM,IAAI,QAAQ,CAChB,oBAAoB,GAAG,mBAAmB,EAC1C,CAAC,EACD,4EAA4E,CAC7E,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,QAAQ,CAChB,qCAAqC,EACrC,CAAC,EACD,uEAAuE,CACxE,CAAC;QACJ,CAAC;QAED,0EAA0E;QAC1E,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACxE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;YACnC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACzB,CAAC;QAED,MAAM,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE;YAC/C,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;SAChF,CAAC,CAAC;QAEH,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;YACpB,IAAI,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACzE,OAAO;QACT,CAAC;QAED,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;YACrB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,CAAC;QACjF,IAAI,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;IAChE,CAAC"}

package/dist/commands/env/unset.d.ts

@@ -0,0 +1,8 @@
+import { BaseCommand } from '../../lib/base-command.js';
+export default class EnvUnset extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static strict: boolean;
+    run(): Promise<void>;
+}
+//# sourceMappingURL=unset.d.ts.map

package/dist/commands/env/unset.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unset.d.ts","sourceRoot":"","sources":["../../../src/commands/env/unset.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAoB,MAAM,2BAA2B,CAAC;AAI1E,MAAM,CAAC,OAAO,OAAO,QAAS,SAAQ,WAAW;IAC/C,OAAgB,WAAW,SAAgE;IAE3F,OAAgB,QAAQ,WAGtB;IAEF,OAAgB,MAAM,UAAS;IAEzB,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAmC3B"}

package/dist/commands/env/unset.js

@@ -0,0 +1,36 @@
+import { BaseCommand } from '../../lib/base-command.js';
+import { CliError } from '../../lib/errors.js';
+import { successMessage } from '../../lib/output.js';
+export default class EnvUnset extends BaseCommand {
+    static description = 'Remove environment variables (triggers a rolling restart).';
+    static examples = [
+        '<%= config.bin %> env unset DATABASE_URL --project my-project --service my-api',
+        '<%= config.bin %> env unset DATABASE_URL REDIS_URL',
+    ];
+    static strict = false;
+    async run() {
+        const { flags, argv } = await this.parse(EnvUnset);
+        const typedFlags = flags;
+        const client = await this.initApiClient(typedFlags);
+        const [projectId, serviceId] = await this.requireService(typedFlags, client);
+        const keysToRemove = new Set(argv);
+        if (keysToRemove.size === 0) {
+            throw new CliError('No keys specified.', 1, 'Pass one or more key names to remove, e.g. `guara env unset DATABASE_URL`.');
+        }
+        // ── Fetch existing, filter out removed keys, PUT remaining ─────────────
+        const { data: existing } = await client.getEnvVars(projectId, serviceId);
+        const remaining = existing.variables.filter((v) => !keysToRemove.has(v.key));
+        await client.updateEnvVars(projectId, serviceId, { variables: remaining });
+        if (typedFlags.json) {
+            this.outputJson({ removed: Array.from(keysToRemove) });
+            return;
+        }
+        if (typedFlags.quiet) {
+            this.outputQuiet('ok');
+            return;
+        }
+        this.log(successMessage(`Removed ${String(keysToRemove.size)} environment variable(s).`));
+        this.log('  This triggers a rolling restart of the service.');
+    }
+}
+//# sourceMappingURL=unset.js.map

package/dist/commands/env/unset.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unset.js","sourceRoot":"","sources":["../../../src/commands/env/unset.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAoB,MAAM,2BAA2B,CAAC;AAC1E,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,MAAM,CAAC,OAAO,OAAO,QAAS,SAAQ,WAAW;IAC/C,MAAM,CAAU,WAAW,GAAG,4DAA4D,CAAC;IAE3F,MAAM,CAAU,QAAQ,GAAG;QACzB,gFAAgF;QAChF,oDAAoD;KACrD,CAAC;IAEF,MAAM,CAAU,MAAM,GAAG,KAAK,CAAC;IAE/B,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,UAAU,GAAG,KAAoB,CAAC;QAExC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QACpD,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAE7E,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,IAAgB,CAAC,CAAC;QAC/C,IAAI,YAAY,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,QAAQ,CAChB,oBAAoB,EACpB,CAAC,EACD,4EAA4E,CAC7E,CAAC;QACJ,CAAC;QAED,0EAA0E;QAC1E,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACzE,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAE7E,MAAM,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QAE3E,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;YACpB,IAAI,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QAED,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;YACrB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,WAAW,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,CAAC;QAC1F,IAAI,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;IAChE,CAAC"}

package/dist/commands/link.d.ts

@@ -0,0 +1,16 @@
+import { BaseCommand } from '../lib/base-command.js';
+export default class Link extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        project: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        service: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        quiet: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        'api-key': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'api-url': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        yes: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=link.d.ts.map

package/dist/commands/link.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"link.d.ts","sourceRoot":"","sources":["../../src/commands/link.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,WAAW,EAAoB,MAAM,wBAAwB,CAAC;AAevE,MAAM,CAAC,OAAO,OAAO,IAAK,SAAQ,WAAW;IAC3C,OAAgB,WAAW,SACwD;IAEnF,OAAgB,QAAQ,WAKtB;IAEF,OAAgB,KAAK;;;;;;;;MAcnB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAwH3B"}

package/dist/commands/link.js

@@ -0,0 +1,123 @@
+import * as clack from '@clack/prompts';
+import { Flags } from '@oclif/core';
+import chalk from 'chalk';
+import { BaseCommand } from '../lib/base-command.js';
+import { writeLinkFile, readLinkFile } from '../lib/context.js';
+import { CliError } from '../lib/errors.js';
+import { successMessage } from '../lib/output.js';
+// ─── Command ────────────────────────────────────────────────────────────────
+export default class Link extends BaseCommand {
+    static description = 'Link the current directory to a GuaraCloud project (and optionally a service).';
+    static examples = [
+        '<%= config.bin %> link',
+        '<%= config.bin %> link --project my-project',
+        '<%= config.bin %> link --project my-project --service my-api',
+        '<%= config.bin %> link --yes',
+    ];
+    static flags = {
+        ...BaseCommand.baseFlags,
+        project: Flags.string({
+            char: 'p',
+            description: 'Project slug (skips interactive picker).',
+            env: 'GUARA_PROJECT',
+            helpGroup: 'GLOBAL',
+        }),
+        service: Flags.string({
+            char: 's',
+            description: 'Service slug (skips interactive picker).',
+            env: 'GUARA_SERVICE',
+            helpGroup: 'GLOBAL',
+        }),
+    };
+    async run() {
+        const { flags } = await this.parse(Link);
+        const typedFlags = flags;
+        const client = await this.initApiClient(typedFlags);
+        const cwd = process.cwd();
+        // Check for existing link file
+        const existingLink = await readLinkFile(cwd);
+        if (existingLink && !typedFlags.yes && !typedFlags.json && !typedFlags.quiet) {
+            const shouldOverwrite = await clack.confirm({
+                message: `This directory is already linked to project "${existingLink.project}"${existingLink.service ? ` / service "${existingLink.service}"` : ''}. Overwrite?`,
+            });
+            if (clack.isCancel(shouldOverwrite) || !shouldOverwrite) {
+                throw new CliError('Link cancelled.', 0);
+            }
+        }
+        // ── Resolve project ──────────────────────────────────────────────────
+        let projectSlug = typedFlags.project;
+        if (!projectSlug) {
+            if (typedFlags.json || typedFlags.quiet) {
+                throw new CliError('No project specified.', 1, 'Pass --project <slug> when using --json or --quiet.');
+            }
+            const projectsResponse = await client.listProjects({ limit: 100 });
+            const projects = projectsResponse.data;
+            if (projects.length === 0) {
+                throw new CliError('No projects found.', 1, 'Create a project first at app.guaracloud.com or with `guara projects create`.');
+            }
+            const selectedProject = await clack.select({
+                message: 'Select a project:',
+                options: projects.map((p) => ({
+                    value: p.slug,
+                    label: p.name,
+                    hint: p.slug,
+                })),
+            });
+            if (clack.isCancel(selectedProject)) {
+                throw new CliError('Link cancelled.', 0);
+            }
+            projectSlug = selectedProject;
+        }
+        // ── Resolve service (optional) ───────────────────────────────────────
+        let serviceSlug = typedFlags.service;
+        if (!serviceSlug && !typedFlags.json && !typedFlags.quiet) {
+            const servicesResponse = await client.listServices(projectSlug, { limit: 100 });
+            const services = servicesResponse.data;
+            if (services.length > 0) {
+                const selectedService = await clack.select({
+                    message: 'Select a service (optional):',
+                    options: [
+                        { value: '__none__', label: 'No service (project only)' },
+                        ...services.map((s) => ({
+                            value: s.slug,
+                            label: s.name,
+                            hint: s.slug,
+                        })),
+                    ],
+                });
+                if (clack.isCancel(selectedService)) {
+                    throw new CliError('Link cancelled.', 0);
+                }
+                if (selectedService !== '__none__') {
+                    serviceSlug = selectedService;
+                }
+            }
+        }
+        // ── Write link file ──────────────────────────────────────────────────
+        const link = { project: projectSlug };
+        if (serviceSlug) {
+            link.service = serviceSlug;
+        }
+        const filePath = await writeLinkFile(cwd, link);
+        const result = {
+            project: projectSlug,
+            service: serviceSlug,
+            path: filePath,
+        };
+        if (typedFlags.json) {
+            this.outputJson(result);
+            return;
+        }
+        if (typedFlags.quiet) {
+            const quietValue = serviceSlug ? `${projectSlug}/${serviceSlug}` : projectSlug;
+            this.outputQuiet(quietValue);
+            return;
+        }
+        const target = serviceSlug
+            ? `${chalk.bold(projectSlug)} / ${chalk.bold(serviceSlug)}`
+            : chalk.bold(projectSlug);
+        this.log(successMessage(`Linked to ${target}`));
+        this.log(chalk.dim(`  ${filePath}`));
+    }
+}
+//# sourceMappingURL=link.js.map

package/dist/commands/link.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"link.js","sourceRoot":"","sources":["../../src/commands/link.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,gBAAgB,CAAC;AACxC,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAI1B,OAAO,EAAE,WAAW,EAAoB,MAAM,wBAAwB,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAkB,MAAM,mBAAmB,CAAC;AAChF,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAUlD,+EAA+E;AAE/E,MAAM,CAAC,OAAO,OAAO,IAAK,SAAQ,WAAW;IAC3C,MAAM,CAAU,WAAW,GACzB,gFAAgF,CAAC;IAEnF,MAAM,CAAU,QAAQ,GAAG;QACzB,wBAAwB;QACxB,6CAA6C;QAC7C,8DAA8D;QAC9D,8BAA8B;KAC/B,CAAC;IAEF,MAAM,CAAU,KAAK,GAAG;QACtB,GAAG,WAAW,CAAC,SAAS;QACxB,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC;YACpB,IAAI,EAAE,GAAG;YACT,WAAW,EAAE,0CAA0C;YACvD,GAAG,EAAE,eAAe;YACpB,SAAS,EAAE,QAAQ;SACpB,CAAC;QACF,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC;YACpB,IAAI,EAAE,GAAG;YACT,WAAW,EAAE,0CAA0C;YACvD,GAAG,EAAE,eAAe;YACpB,SAAS,EAAE,QAAQ;SACpB,CAAC;KACH,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,UAAU,GAAG,KAAoB,CAAC;QAExC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAE1B,+BAA+B;QAC/B,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,YAAY,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YAC7E,MAAM,eAAe,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC;gBAC1C,OAAO,EAAE,gDAAgD,YAAY,CAAC,OAAO,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,YAAY,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,cAAc;aAClK,CAAC,CAAC;YAEH,IAAI,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;gBACxD,MAAM,IAAI,QAAQ,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QAED,wEAAwE;QACxE,IAAI,WAAW,GAAuB,UAAU,CAAC,OAAO,CAAC;QAEzD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,IAAI,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;gBACxC,MAAM,IAAI,QAAQ,CAChB,uBAAuB,EACvB,CAAC,EACD,qDAAqD,CACtD,CAAC;YACJ,CAAC;YAED,MAAM,gBAAgB,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YACnE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC;YAEvC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,QAAQ,CAChB,oBAAoB,EACpB,CAAC,EACD,+EAA+E,CAChF,CAAC;YACJ,CAAC;YAED,MAAM,eAAe,GAAG,MAAM,KAAK,CAAC,MAAM,CAAS;gBACjD,OAAO,EAAE,mBAAmB;gBAC5B,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAkB,EAAE,EAAE,CAAC,CAAC;oBAC7C,KAAK,EAAE,CAAC,CAAC,IAAI;oBACb,KAAK,EAAE,CAAC,CAAC,IAAI;oBACb,IAAI,EAAE,CAAC,CAAC,IAAI;iBACb,CAAC,CAAC;aACJ,CAAC,CAAC;YAEH,IAAI,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,QAAQ,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC;YAC3C,CAAC;YAED,WAAW,GAAG,eAAe,CAAC;QAChC,CAAC;QAED,wEAAwE;QACxE,IAAI,WAAW,GAAuB,UAAU,CAAC,OAAO,CAAC;QAEzD,IAAI,CAAC,WAAW,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YAC1D,MAAM,gBAAgB,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YAChF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC;YAEvC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,eAAe,GAAG,MAAM,KAAK,CAAC,MAAM,CAAS;oBACjD,OAAO,EAAE,8BAA8B;oBACvC,OAAO,EAAE;wBACP,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,2BAA2B,EAAE;wBACzD,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAkB,EAAE,EAAE,CAAC,CAAC;4BACvC,KAAK,EAAE,CAAC,CAAC,IAAI;4BACb,KAAK,EAAE,CAAC,CAAC,IAAI;4BACb,IAAI,EAAE,CAAC,CAAC,IAAI;yBACb,CAAC,CAAC;qBACJ;iBACF,CAAC,CAAC;gBAEH,IAAI,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;oBACpC,MAAM,IAAI,QAAQ,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC;gBAC3C,CAAC;gBAED,IAAI,eAAe,KAAK,UAAU,EAAE,CAAC;oBACnC,WAAW,GAAG,eAAe,CAAC;gBAChC,CAAC;YACH,CAAC;QACH,CAAC;QAED,wEAAwE;QACxE,MAAM,IAAI,GAAc,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;QACjD,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC,OAAO,GAAG,WAAW,CAAC;QAC7B,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAEhD,MAAM,MAAM,GAAe;YACzB,OAAO,EAAE,WAAW;YACpB,OAAO,EAAE,WAAW;YACpB,IAAI,EAAE,QAAQ;SACf,CAAC;QAEF,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;YACpB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACxB,OAAO;QACT,CAAC;QAED,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;YAC/E,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;YAC7B,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,WAAW;YACxB,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE;YAC3D,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAE5B,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,aAAa,MAAM,EAAE,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC,CAAC;IACvC,CAAC"}

package/dist/commands/login.d.ts

@@ -0,0 +1,28 @@
+import { BaseCommand } from '../lib/base-command.js';
+export default class Login extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        'api-key': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        browser: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        quiet: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        'api-url': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        project: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        service: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        yes: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+    private validateAndSaveKey;
+    /**
+     * Browser-based login flow.
+     *
+     * 1. Starts a local HTTP server on a random port
+     * 2. Opens `app.guaracloud.com/cli/auth` with callback_port, state, and hostname
+     * 3. User authorises in the browser → web app redirects to localhost callback
+     * 4. Local server receives the API key, validates the state token (CSRF protection)
+     * 5. Key is validated via `whoami` and persisted
+     */
+    private loginWithBrowser;
+}
+//# sourceMappingURL=login.d.ts.map

package/dist/commands/login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,WAAW,EAAoB,MAAM,wBAAwB,CAAC;AA+DvE,MAAM,CAAC,OAAO,OAAO,KAAM,SAAQ,WAAW;IAC5C,OAAgB,WAAW,SAAmC;IAE9D,OAAgB,QAAQ,WAItB;IAEF,OAAgB,KAAK;;;;;;;;;MAWnB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;YAeZ,kBAAkB;IAoChC;;;;;;;;OAQG;YACW,gBAAgB;CA8F/B"}

package/dist/commands/login.js

@@ -0,0 +1,190 @@
+import { randomBytes } from 'node:crypto';
+import { hostname as osHostname } from 'node:os';
+import { Flags } from '@oclif/core';
+import chalk from 'chalk';
+import { saveApiKey } from '../lib/auth.js';
+import { BaseCommand } from '../lib/base-command.js';
+import { CliError } from '../lib/errors.js';
+import { successMessage } from '../lib/output.js';
+// ─── Constants ──────────────────────────────────────────────────────────────
+const DEFAULT_APP_URL = 'https://app.guaracloud.com';
+const LOGIN_TIMEOUT_MS = 120_000;
+const SUCCESS_HTML = `<!DOCTYPE html>
+<html>
+<head><title>GuaraCloud CLI</title></head>
+<body style="font-family:system-ui;display:flex;justify-content:center;align-items:center;height:100vh;margin:0;background:#0a0a0a;color:#fafafa">
+<div style="text-align:center">
+<h1 style="font-size:1.5rem;margin-bottom:0.5rem">Authenticated</h1>
+<p style="color:#888">You can close this tab and return to your terminal.</p>
+</div>
+</body>
+</html>`;
+const ERROR_HTML = (msg) => `<!DOCTYPE html>
+<html>
+<head><title>GuaraCloud CLI</title></head>
+<body style="font-family:system-ui;display:flex;justify-content:center;align-items:center;height:100vh;margin:0;background:#0a0a0a;color:#fafafa">
+<div style="text-align:center">
+<h1 style="font-size:1.5rem;color:#ef4444;margin-bottom:0.5rem">Error</h1>
+<p style="color:#888">${msg}</p>
+</div>
+</body>
+</html>`;
+// ─── Helpers ────────────────────────────────────────────────────────────────
+/**
+ * Derive the web app URL from the API URL.
+ *
+ * Maps `api.guaracloud.com` → `app.guaracloud.com`, etc.
+ * Falls back to the default app URL if the API URL doesn't follow the convention.
+ */
+function deriveAppUrl(apiUrl) {
+    try {
+        const url = new URL(apiUrl);
+        if (url.hostname.startsWith('api.')) {
+            url.hostname = url.hostname.replace(/^api\./, 'app.');
+            return url.origin;
+        }
+        return DEFAULT_APP_URL;
+    }
+    catch {
+        return DEFAULT_APP_URL;
+    }
+}
+// ─── Command ────────────────────────────────────────────────────────────────
+export default class Login extends BaseCommand {
+    static description = 'Authenticate with GuaraCloud.';
+    static examples = [
+        '<%= config.bin %> login',
+        '<%= config.bin %> login --api-key gk_live_xxxxx', // gitleaks:allow
+        '<%= config.bin %> login --browser',
+    ];
+    static flags = {
+        ...BaseCommand.baseFlags,
+        'api-key': Flags.string({
+            description: 'Authenticate directly with an API key.',
+            env: 'GUARA_API_KEY',
+            helpGroup: 'GLOBAL',
+        }),
+        browser: Flags.boolean({
+            description: 'Force browser-based OAuth login.',
+            default: false,
+        }),
+    };
+    async run() {
+        const { flags } = await this.parse(Login);
+        const typedFlags = flags;
+        const apiKeyValue = typedFlags['api-key'];
+        if (apiKeyValue) {
+            await this.validateAndSaveKey(apiKeyValue, 'api-key', typedFlags);
+        }
+        else {
+            await this.loginWithBrowser(typedFlags);
+        }
+    }
+    // ─── Shared key validation & persistence ────────────────────────────────
+    async validateAndSaveKey(apiKey, method, flags) {
+        const client = await this.initApiClient({ ...flags, 'api-key': apiKey });
+        const { data: user } = await client.whoami();
+        const storage = await saveApiKey(apiKey);
+        const result = {
+            authenticated: true,
+            method,
+            storage,
+            email: user.email,
+        };
+        if (flags.json) {
+            this.outputJson(result);
+            return;
+        }
+        if (flags.quiet) {
+            this.outputQuiet(user.email);
+            return;
+        }
+        this.log(successMessage(`Authenticated as ${chalk.bold(user.email)}`));
+        this.log(chalk.dim(`  API key stored in ${storage === 'keychain' ? 'system keychain' : 'config file'}.`));
+    }
+    // ─── Browser login ──────────────────────────────────────────────────────
+    /**
+     * Browser-based login flow.
+     *
+     * 1. Starts a local HTTP server on a random port
+     * 2. Opens `app.guaracloud.com/cli/auth` with callback_port, state, and hostname
+     * 3. User authorises in the browser → web app redirects to localhost callback
+     * 4. Local server receives the API key, validates the state token (CSRF protection)
+     * 5. Key is validated via `whoami` and persisted
+     */
+    async loginWithBrowser(flags) {
+        if (!process.stdin.isTTY && !flags.browser) {
+            throw new CliError('No API key provided and no interactive terminal available.', 1, 'Pass --api-key <key> for non-interactive authentication.');
+        }
+        const { default: open } = await import('open');
+        const http = await import('node:http');
+        const apiUrl = flags['api-url'] ?? 'https://api.guaracloud.com';
+        const appUrl = deriveAppUrl(apiUrl);
+        const state = randomBytes(16).toString('hex');
+        const machineHostname = osHostname();
+        // Start a local callback server to receive the API key from the browser redirect
+        const apiKey = await new Promise((resolve, reject) => {
+            const server = http.createServer((req, res) => {
+                try {
+                    const url = new URL(req.url ?? '/', 'http://localhost');
+                    // CSRF protection: validate the state token matches
+                    const returnedState = url.searchParams.get('state');
+                    if (returnedState !== state) {
+                        res.writeHead(400, { 'Content-Type': 'text/html' });
+                        res.end(ERROR_HTML('Invalid state parameter. Please try again.'));
+                        server.close();
+                        reject(new CliError('Browser login failed: state mismatch.', 1, 'Run `guara login` again.'));
+                        return;
+                    }
+                    const key = url.searchParams.get('key');
+                    if (!key) {
+                        res.writeHead(400, { 'Content-Type': 'text/html' });
+                        res.end(ERROR_HTML('No API key received from the server.'));
+                        server.close();
+                        reject(new CliError('Browser login failed: no API key received.'));
+                        return;
+                    }
+                    res.writeHead(200, { 'Content-Type': 'text/html' });
+                    res.end(SUCCESS_HTML);
+                    server.close();
+                    resolve(key);
+                }
+                catch (err) {
+                    server.close();
+                    reject(err instanceof Error ? err : new CliError('Browser login failed unexpectedly.'));
+                }
+            });
+            server.listen(0, '127.0.0.1', () => {
+                const address = server.address();
+                if (!address || typeof address === 'string') {
+                    server.close();
+                    reject(new CliError('Failed to start local callback server.'));
+                    return;
+                }
+                const port = address.port;
+                const loginUrl = `${appUrl}/cli/auth?callback_port=${String(port)}&state=${encodeURIComponent(state)}&hostname=${encodeURIComponent(machineHostname)}`;
+                if (!flags.quiet) {
+                    this.log('Opening browser to authenticate...');
+                    this.log(chalk.dim(`  ${loginUrl}`));
+                }
+                open(loginUrl).catch(() => {
+                    if (!flags.quiet) {
+                        this.log(chalk.yellow('Could not open browser automatically.'));
+                        this.log(`  Open this URL manually: ${loginUrl}`);
+                    }
+                });
+            });
+            // Timeout after 2 minutes
+            const timeout = setTimeout(() => {
+                server.close();
+                reject(new CliError('Browser login timed out after 120 seconds.', 1, 'Run `guara login` again.'));
+            }, LOGIN_TIMEOUT_MS);
+            server.on('close', () => {
+                clearTimeout(timeout);
+            });
+        });
+        // Validate the received key and persist it
+        await this.validateAndSaveKey(apiKey, 'browser', flags);
+    }
+}
+//# sourceMappingURL=login.js.map

package/dist/commands/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAE,MAAM,SAAS,CAAC;AAEjD,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAoB,MAAM,wBAAwB,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD,+EAA+E;AAE/E,MAAM,eAAe,GAAG,4BAA4B,CAAC;AACrD,MAAM,gBAAgB,GAAG,OAAO,CAAC;AAEjC,MAAM,YAAY,GAAG;;;;;;;;;QASb,CAAC;AAET,MAAM,UAAU,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC;;;;;;wBAMZ,GAAG;;;QAGnB,CAAC;AAWT,+EAA+E;AAE/E;;;;;GAKG;AACH,SAAS,YAAY,CAAC,MAAc;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACtD,OAAO,GAAG,CAAC,MAAM,CAAC;QACpB,CAAC;QACD,OAAO,eAAe,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,eAAe,CAAC;IACzB,CAAC;AACH,CAAC;AAED,+EAA+E;AAE/E,MAAM,CAAC,OAAO,OAAO,KAAM,SAAQ,WAAW;IAC5C,MAAM,CAAU,WAAW,GAAG,+BAA+B,CAAC;IAE9D,MAAM,CAAU,QAAQ,GAAG;QACzB,yBAAyB;QACzB,iDAAiD,EAAE,iBAAiB;QACpE,mCAAmC;KACpC,CAAC;IAEF,MAAM,CAAU,KAAK,GAAG;QACtB,GAAG,WAAW,CAAC,SAAS;QACxB,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC;YACtB,WAAW,EAAE,wCAAwC;YACrD,GAAG,EAAE,eAAe;YACpB,SAAS,EAAE,QAAQ;SACpB,CAAC;QACF,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC;YACrB,WAAW,EAAE,kCAAkC;YAC/C,OAAO,EAAE,KAAK;SACf,CAAC;KACH,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,KAA2C,CAAC;QAE/D,MAAM,WAAW,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;QAE1C,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,kBAAkB,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QACpE,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,2EAA2E;IAEnE,KAAK,CAAC,kBAAkB,CAC9B,MAAc,EACd,MAA6B,EAC7B,KAAkB;QAElB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QACzE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC;QAEzC,MAAM,MAAM,GAAgB;YAC1B,aAAa,EAAE,IAAI;YACnB,MAAM;YACN,OAAO;YACP,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC;QAEF,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YACf,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACxB,OAAO;QACT,CAAC;QAED,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7B,OAAO;QACT,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,oBAAoB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,GAAG,CACN,KAAK,CAAC,GAAG,CACP,uBAAuB,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,aAAa,GAAG,CACrF,CACF,CAAC;IACJ,CAAC;IAED,2EAA2E;IAE3E;;;;;;;;OAQG;IACK,KAAK,CAAC,gBAAgB,CAAC,KAAyC;QACtE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC3C,MAAM,IAAI,QAAQ,CAChB,4DAA4D,EAC5D,CAAC,EACD,0DAA0D,CAC3D,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;QAEvC,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,4BAA4B,CAAC;QAChE,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,eAAe,GAAG,UAAU,EAAE,CAAC;QAErC,iFAAiF;QACjF,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBAC5C,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;oBAExD,oDAAoD;oBACpD,MAAM,aAAa,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;oBACpD,IAAI,aAAa,KAAK,KAAK,EAAE,CAAC;wBAC5B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;wBACpD,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,4CAA4C,CAAC,CAAC,CAAC;wBAClE,MAAM,CAAC,KAAK,EAAE,CAAC;wBACf,MAAM,CACJ,IAAI,QAAQ,CAAC,uCAAuC,EAAE,CAAC,EAAE,0BAA0B,CAAC,CACrF,CAAC;wBACF,OAAO;oBACT,CAAC;oBAED,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;oBACxC,IAAI,CAAC,GAAG,EAAE,CAAC;wBACT,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;wBACpD,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,sCAAsC,CAAC,CAAC,CAAC;wBAC5D,MAAM,CAAC,KAAK,EAAE,CAAC;wBACf,MAAM,CAAC,IAAI,QAAQ,CAAC,4CAA4C,CAAC,CAAC,CAAC;wBACnE,OAAO;oBACT,CAAC;oBAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;oBACpD,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;oBACtB,MAAM,CAAC,KAAK,EAAE,CAAC;oBACf,OAAO,CAAC,GAAG,CAAC,CAAC;gBACf,CAAC;gBAAC,OAAO,GAAY,EAAE,CAAC;oBACtB,MAAM,CAAC,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,oCAAoC,CAAC,CAAC,CAAC;gBAC1F,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;gBACjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;oBAC5C,MAAM,CAAC,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,IAAI,QAAQ,CAAC,wCAAwC,CAAC,CAAC,CAAC;oBAC/D,OAAO;gBACT,CAAC;gBAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;gBAC1B,MAAM,QAAQ,GAAG,GAAG,MAAM,2BAA2B,MAAM,CAAC,IAAI,CAAC,UAAU,kBAAkB,CAAC,KAAK,CAAC,aAAa,kBAAkB,CAAC,eAAe,CAAC,EAAE,CAAC;gBAEvJ,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;oBACjB,IAAI,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;oBAC/C,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC,CAAC;gBACvC,CAAC;gBAED,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;oBACxB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;wBACjB,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,uCAAuC,CAAC,CAAC,CAAC;wBAChE,IAAI,CAAC,GAAG,CAAC,6BAA6B,QAAQ,EAAE,CAAC,CAAC;oBACpD,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,0BAA0B;YAC1B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,CACJ,IAAI,QAAQ,CAAC,4CAA4C,EAAE,CAAC,EAAE,0BAA0B,CAAC,CAC1F,CAAC;YACJ,CAAC,EAAE,gBAAgB,CAAC,CAAC;YAErB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACtB,YAAY,CAAC,OAAO,CAAC,CAAC;YACxB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,2CAA2C;QAC3C,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAC1D,CAAC"}

package/dist/commands/logout.d.ts

@@ -0,0 +1,7 @@
+import { BaseCommand } from '../lib/base-command.js';
+export default class Logout extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    run(): Promise<void>;
+}
+//# sourceMappingURL=logout.d.ts.map

package/dist/commands/logout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logout.d.ts","sourceRoot":"","sources":["../../src/commands/logout.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAoB,MAAM,wBAAwB,CAAC;AAYvE,MAAM,CAAC,OAAO,OAAO,MAAO,SAAQ,WAAW;IAC7C,OAAgB,WAAW,SAA0D;IAErF,OAAgB,QAAQ,WAAgC;IAElD,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CA2B3B"}