@gurulu/cli 1.5.5 → 1.6.0

package/dist/bin.js

@@ -39299,27 +39299,60 @@ class ApiClient {
       "User-Agent": "@gurulu/cli",
       ...extra
     };
-    if (this.opts.apiKey) {
+    if (this.opts.bearer) {
+      h2.Authorization = `Bearer ${this.opts.bearer}`;
+    } else if (this.opts.apiKey) {
       h2["X-Gurulu-Api-Key"] = this.opts.apiKey;
     }
     return h2;
   }
   async get(path, query) {
     const qs = query ? `?${new URLSearchParams(Object.fromEntries(Object.entries(query).map(([k2, v2]) => [k2, String(v2)]))).toString()}` : "";
-    const res = await $request(`${this.opts.endpoint}${path}${qs}`, {
-      method: "GET",
-      headers: this.headers()
-    });
-    return this.handle(res);
+    return this.send("GET", `${path}${qs}`);
   }
   async post(path, body) {
-    const res = await $request(`${this.opts.endpoint}${path}`, {
-      method: "POST",
-      headers: this.headers({ "Content-Type": "application/json" }),
-      body: JSON.stringify(body ?? {})
+    return this.send("POST", path, body);
+  }
+  async send(method, pathWithQs, body, retried = false) {
+    const res = await $request(`${this.opts.endpoint}${pathWithQs}`, {
+      method,
+      headers: method === "POST" ? this.headers({ "Content-Type": "application/json" }) : this.headers(),
+      ...method === "POST" ? { body: JSON.stringify(body ?? {}) } : {}
     });
+    if (res.statusCode === 401 && this.opts.bearer && this.opts.refresh && !retried) {
+      await res.body.text().catch(() => "");
+      if (await this.refreshBearer()) {
+        return this.send(method, pathWithQs, body, true);
+      }
+    }
     return this.handle(res);
   }
+  async refreshBearer() {
+    const rc = this.opts.refresh;
+    if (!rc)
+      return false;
+    try {
+      const res = await $request(`${this.opts.endpoint}/v1/cli/auth/refresh`, {
+        method: "POST",
+        headers: {
+          Accept: "application/json",
+          "Content-Type": "application/json",
+          "User-Agent": "@gurulu/cli"
+        },
+        body: JSON.stringify({ refresh_token: rc.refreshToken })
+      });
+      const text = await res.body.text();
+      if (res.statusCode < 200 || res.statusCode >= 300)
+        return false;
+      const t2 = JSON.parse(text);
+      this.opts.bearer = t2.access_token;
+      rc.refreshToken = t2.refresh_token;
+      rc.onRotate(t2);
+      return true;
+    } catch {
+      return false;
+    }
+  }
   listWorkspaces() {
     return this.get("/v1/cli/workspaces");
   }
@@ -39329,6 +39362,15 @@ class ApiClient {
   issueWriteKey(workspaceId) {
     return this.post(`/v1/cli/workspaces/${encodeURIComponent(workspaceId)}/write-key`, {});
   }
+  identityListWorkspaces() {
+    return this.get("/v1/workspaces");
+  }
+  identityCreateWorkspace(body) {
+    return this.post("/v1/workspaces", body);
+  }
+  mintWorkspaceKey(workspaceId, body) {
+    return this.post(`/v1/workspaces/${encodeURIComponent(workspaceId)}/keys`, body);
+  }
   planEvents(body) {
     return this.post("/v1/cli/ai/plan-events", body);
   }
@@ -39428,6 +39470,21 @@ function writeGlobalCredentials(creds) {
     chmodSync(path, 384);
   } catch {}
 }
+function readIdentity() {
+  return readGlobalCredentials().identity ?? null;
+}
+function writeIdentity(identity) {
+  const creds = readGlobalCredentials();
+  creds.identity = identity;
+  writeGlobalCredentials(creds);
+}
+function clearIdentity() {
+  const creds = readGlobalCredentials();
+  if (creds.identity) {
+    delete creds.identity;
+    writeGlobalCredentials(creds);
+  }
+}
 function findCredentialForWorkspace(workspaceId) {
   const creds = readGlobalCredentials();
   return creds.workspaces.find((w2) => w2.workspace_id === workspaceId) ?? null;
@@ -39824,8 +39881,92 @@ var auditCmd = defineCommand({
 });
 
 // src/commands/auth.ts
-var POLL_INTERVAL_MS = 5000;
+import open from "open";
+
+// src/lib/identity.ts
+function identityClient(id) {
+  return new ApiClient({
+    endpoint: id.endpoint,
+    bearer: id.access_token,
+    refresh: {
+      refreshToken: id.refresh_token,
+      onRotate: (t2) => {
+        const cur = readIdentity();
+        if (!cur)
+          return;
+        writeIdentity({
+          ...cur,
+          access_token: t2.access_token,
+          refresh_token: t2.refresh_token,
+          expires_at: t2.expires_in != null ? new Date(Date.now() + t2.expires_in * 1000).toISOString() : cur.expires_at,
+          last_used: new Date().toISOString()
+        });
+      }
+    }
+  });
+}
 var POLL_MAX_ATTEMPTS = 180;
+function sleep(ms) {
+  return new Promise((r3) => setTimeout(r3, ms));
+}
+function toIdentity(endpoint, token) {
+  return {
+    access_token: token.access_token,
+    refresh_token: token.refresh_token ?? "",
+    expires_at: token.expires_in != null ? new Date(Date.now() + token.expires_in * 1000).toISOString() : new Date(Date.now() + 6 * 24 * 60 * 60 * 1000).toISOString(),
+    endpoint,
+    user_id: token.user_id,
+    last_used: new Date().toISOString()
+  };
+}
+async function runDeviceFlowIdentity(endpoint, display) {
+  const client = new ApiClient({ endpoint });
+  const start = await client.post("/v1/cli/auth/device", {
+    client_name: "@gurulu/cli",
+    grant_type: "identity"
+  });
+  const url = start.verification_url_complete || start.verification_url;
+  display.onPrompt(start.user_code, url);
+  if (display.openBrowser) {
+    try {
+      await display.openBrowser(url);
+    } catch {}
+  }
+  display.onWaiting?.();
+  const interval = Math.max((start.interval ?? 5) * 1000, 3000);
+  for (let i2 = 0;i2 < POLL_MAX_ATTEMPTS; i2++) {
+    await sleep(interval);
+    try {
+      const token = await client.post("/v1/cli/auth/token", {
+        device_code: start.device_code
+      });
+      if (token.access_token && token.refresh_token) {
+        const id = toIdentity(endpoint, token);
+        writeIdentity(id);
+        return id;
+      }
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      if (msg.includes("AUTHORIZATION_PENDING"))
+        continue;
+      if (msg.includes("ACCESS_DENIED"))
+        throw new Error("Yetkilendirme reddedildi");
+      if (msg.includes("EXPIRED_TOKEN"))
+        throw new Error("Kod süresi doldu — tekrar dene");
+    }
+  }
+  throw new Error("device flow zaman aşımına uğradı");
+}
+function loadIdentity(endpoint) {
+  const id = readIdentity();
+  if (!id?.refresh_token)
+    return null;
+  if (id.endpoint !== endpoint)
+    return null;
+  return id;
+}
+
+// src/commands/auth.ts
 var loginCmd = defineCommand({
   meta: {
     name: "login",
@@ -39859,54 +40000,27 @@ var loginCmd = defineCommand({
       console.log(`[gurulu] credential saved for workspace ${workspaceId}`);
       return;
     }
-    const client = new ApiClient({ endpoint });
-    let start;
     try {
-      start = await client.post("/v1/cli/auth/device", {
-        client_name: "@gurulu/cli"
+      const id = await runDeviceFlowIdentity(endpoint, {
+        onPrompt: (userCode, url) => {
+          console.log(`[gurulu] visit ${url}`);
+          console.log(`[gurulu] code:  ${userCode}`);
+          console.log("[gurulu] waiting for browser approval (~15m)...");
+        },
+        openBrowser: async (url) => {
+          await open(url);
+        }
       });
+      console.log(`
+[gurulu] signed in ✓ — account session stored (reused across projects + MCP)`);
+      if (id.user_id) {
+        console.log(`[gurulu] user: ${id.user_id}`);
+      }
     } catch (err) {
-      console.error(`[gurulu] device authorization failed: ${err instanceof Error ? err.message : String(err)}`);
+      console.error(`
+[gurulu] login failed: ${err instanceof Error ? err.message : String(err)}`);
       process.exit(1);
     }
-    console.log(`[gurulu] visit ${start.verification_url}`);
-    console.log(`[gurulu] enter code: ${start.user_code}`);
-    console.log(`[gurulu] or follow: ${start.verification_url_complete}
-`);
-    console.log(`[gurulu] polling (${POLL_MAX_ATTEMPTS * 5}s timeout)...`);
-    const interval = (start.interval ?? 5) * 1000;
-    for (let i2 = 0;i2 < POLL_MAX_ATTEMPTS; i2++) {
-      await sleep(Math.max(interval, POLL_INTERVAL_MS));
-      try {
-        const token = await client.post("/v1/cli/auth/token", {
-          device_code: start.device_code
-        });
-        if (token.access_token) {
-          upsertCredential({
-            workspace_id: token.workspace_id,
-            api_key: token.access_token,
-            endpoint,
-            last_used: new Date().toISOString()
-          });
-          console.log(`
-[gurulu] authorized — workspace ${token.workspace_id}`);
-          return;
-        }
-      } catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        if (msg.includes("AUTHORIZATION_PENDING") || err.code === "AUTHORIZATION_PENDING") {
-          continue;
-        }
-        if (msg.includes("ACCESS_DENIED") || msg.includes("EXPIRED_TOKEN")) {
-          console.error(`
-[gurulu] device flow ended: ${msg}`);
-          process.exit(1);
-        }
-      }
-    }
-    console.error(`
-[gurulu] timed out waiting for authorization`);
-    process.exit(1);
   }
 });
 var logoutCmd = defineCommand({
@@ -39924,14 +40038,23 @@ var logoutCmd = defineCommand({
     const creds = readGlobalCredentials();
     for (const w2 of creds.workspaces)
       removeCredential(w2.workspace_id);
-    console.log(`[gurulu] removed ${creds.workspaces.length} credential(s)`);
+    clearIdentity();
+    console.log(`[gurulu] signed out — removed ${creds.workspaces.length} workspace credential(s) + account session`);
   }
 });
 var whoamiCmd = defineCommand({
   meta: { name: "whoami", description: "Show active credentials + workspace info" },
   async run() {
+    const identity = readIdentity();
+    if (identity) {
+      console.log(`[gurulu] account session: active${identity.user_id ? ` (user ${identity.user_id})` : ""} @ ${identity.endpoint}`);
+    }
     const cred = resolveActiveCredential({});
     if (!cred) {
+      if (identity) {
+        console.log("[gurulu] no workspace bound yet — run `gurulu init` in a project");
+        return;
+      }
       console.log("[gurulu] not logged in — run `gurulu login`");
       process.exit(1);
     }
@@ -39948,13 +40071,11 @@ var whoamiCmd = defineCommand({
     }
   }
 });
-function sleep(ms) {
-  return new Promise((r3) => setTimeout(r3, ms));
-}
 
 // src/wizard/run.ts
 import { existsSync as existsSync11, mkdirSync as mkdirSync3, readFileSync as readFileSync12, writeFileSync as writeFileSync11 } from "node:fs";
-import { dirname as dirname5, join as join11 } from "node:path";
+import { homedir as homedir3 } from "node:os";
+import { dirname as dirname5, join as join11, resolve as resolve2 } from "node:path";
 import * as p4 from "@clack/prompts";
 
 // src/commands/pull.ts
@@ -40901,8 +41022,8 @@ function buildInstallPlan(detected, ctx = {}) {
 
 // src/lib/ui.ts
 var noColor = Boolean(process.env.NO_COLOR) || process.env.TERM === "dumb" || !process.stdout.isTTY;
-function wrap(open, close) {
-  return (s2) => noColor ? s2 : `\x1B[${open}m${s2}\x1B[${close}m`;
+function wrap(open2, close) {
+  return (s2) => noColor ? s2 : `\x1B[${open2}m${s2}\x1B[${close}m`;
 }
 function fg(code) {
   return (s2) => noColor ? s2 : `\x1B[38;5;${code}m${s2}\x1B[39m`;
@@ -41189,7 +41310,16 @@ function buildAugmentTask(competitors) {
 
 // src/wizard/auth.ts
 import * as p from "@clack/prompts";
-import open from "open";
+import open2 from "open";
+var SECRET_SCOPES = [
+  "admin",
+  "ingest",
+  "observability",
+  "registry.read",
+  "registry.write",
+  "events.read",
+  "events.write"
+];
 async function ensureAuth(opts) {
   const endpoint = opts.endpoint ?? DEFAULT_ENDPOINT;
   if (opts.apiKey) {
@@ -41215,57 +41345,80 @@ async function ensureAuth(opts) {
       endpoint: existing.endpoint
     };
   }
-  return deviceFlow(endpoint);
+  return identityWorkspaceFlow(endpoint, opts.workspaceId);
 }
-async function deviceFlow(endpoint) {
-  const client = new ApiClient({ endpoint });
-  const start = await client.post("/v1/cli/auth/device", {
-    client_name: "@gurulu/cli"
-  });
-  const url = start.verification_url_complete || start.verification_url;
-  p.note(`${start.user_code}
-
-${url}`, "Tarayıcıda onayla");
-  try {
-    await open(url);
-  } catch {
-    p.log.warn("Tarayıcı otomatik açılamadı — yukarıdaki linki elle aç.");
-  }
-  const s2 = p.spinner();
-  s2.start("Tarayıcıda onay bekleniyor…");
-  const interval = Math.max((start.interval ?? 5) * 1000, 3000);
-  const maxAttempts = 180;
-  for (let i2 = 0;i2 < maxAttempts; i2++) {
-    await sleep2(interval);
-    try {
-      const token = await client.post("/v1/cli/auth/token", {
-        device_code: start.device_code
-      });
-      if (token.access_token) {
-        upsertCredential({
-          workspace_id: token.workspace_id,
-          api_key: token.access_token,
-          endpoint,
-          last_used: new Date().toISOString()
-        });
-        s2.stop("Yetkilendirildi ✓");
-        return { apiKey: token.access_token, workspaceId: token.workspace_id, endpoint };
+async function identityWorkspaceFlow(endpoint, wantWorkspaceId) {
+  let id = loadIdentity(endpoint);
+  if (!id) {
+    const spin = p.spinner();
+    id = await runDeviceFlowIdentity(endpoint, {
+      onPrompt: (userCode, url) => p.note(`${userCode}
+
+${url}`, "Tarayıcıda hesabına giriş yap"),
+      onWaiting: () => spin.start("Tarayıcıda onay bekleniyor…"),
+      openBrowser: async (url) => {
+        await open2(url);
       }
-    } catch (err) {
-      const msg = err instanceof Error ? err.message : String(err);
-      if (msg.includes("AUTHORIZATION_PENDING"))
-        continue;
-      if (msg.includes("ACCESS_DENIED") || msg.includes("EXPIRED_TOKEN")) {
-        s2.stop("Yetkilendirme reddedildi / süresi doldu", 1);
-        throw new Error(msg);
-      }
-    }
+    });
+    spin.stop("Giriş yapıldı ✓ (bu cihaz artık kayıtlı — bir daha login gerekmez)");
   }
-  s2.stop("Zaman aşımı", 1);
-  throw new Error("device flow zaman aşımına uğradı");
+  const client = identityClient(id);
+  let workspaceId = wantWorkspaceId;
+  if (!workspaceId) {
+    const list = await client.identityListWorkspaces().catch(() => ({ workspaces: [] }));
+    workspaceId = await selectOrCreateWorkspace(client, list.workspaces ?? []);
+  }
+  const mint = await client.mintWorkspaceKey(workspaceId, {
+    name: "Gurulu CLI",
+    type: "secret",
+    scopes: SECRET_SCOPES
+  });
+  upsertCredential({
+    workspace_id: workspaceId,
+    api_key: mint.key,
+    endpoint,
+    last_used: new Date().toISOString()
+  });
+  return { apiKey: mint.key, workspaceId, endpoint };
 }
-function sleep2(ms) {
-  return new Promise((r3) => setTimeout(r3, ms));
+async function selectOrCreateWorkspace(client, workspaces) {
+  if (workspaces.length === 0)
+    return createWorkspace(client);
+  const choice = await p.select({
+    message: "Hangi workspace? (var olanı kullan ya da yeni oluştur)",
+    options: [
+      ...workspaces.map((w2) => ({
+        value: w2.workspace_id,
+        label: `${w2.name}${w2.slug ? ` (${w2.slug})` : ""}`
+      })),
+      { value: "__new__", label: "+ Yeni workspace oluştur" }
+    ]
+  });
+  if (p.isCancel(choice))
+    throw new Error("iptal edildi");
+  return choice === "__new__" ? createWorkspace(client) : String(choice);
+}
+async function createWorkspace(client) {
+  const name = await p.text({
+    message: "Workspace adı",
+    placeholder: "my-app",
+    validate: (v2) => v2 && v2.trim().length >= 1 ? undefined : "gerekli"
+  });
+  if (p.isCancel(name))
+    throw new Error("iptal edildi");
+  const domain = await p.text({
+    message: "Site domain",
+    placeholder: "example.com",
+    initialValue: "example.com",
+    validate: (v2) => v2 && v2.trim().length >= 3 ? undefined : "en az 3 karakter"
+  });
+  if (p.isCancel(domain))
+    throw new Error("iptal edildi");
+  const ws = await client.identityCreateWorkspace({
+    name: String(name).trim(),
+    domain: String(domain).trim()
+  });
+  return ws.workspace_id;
 }
 
 // src/wizard/checkpoint.ts
@@ -41664,7 +41817,7 @@ async function runFeatures(client, detected, opts) {
   const s2 = p2.spinner();
   s2.start("Özellikler registry'ye kuruluyor…");
   try {
-    await client.post("/features/register", { features: selectedKeys });
+    await client.post("/v1/cli/features/register", { features: selectedKeys });
     s2.stop(c3.neon(`✓ ${selected.length} özellik kuruldu`));
   } catch (err) {
     const detail = err && typeof err === "object" && "status" in err ? `${err.status} ${err.message ?? ""}`.trim() : err instanceof Error ? err.message : String(err);
@@ -42120,10 +42273,45 @@ function bail() {
   p4.cancel("İptal edildi.");
   process.exit(0);
 }
+async function confirmTargetDir(cwd) {
+  const isHome = cwd === homedir3();
+  if (existsSync11(join11(cwd, "package.json")) && !isHome)
+    return cwd;
+  p4.log.warn(isHome ? `Ana dizinde kurulum yapmak üzeresin (${cwd}) — genelde yanlış; SDK'yı proje dizininde çalıştır.` : `Bu dizinde package.json yok (${cwd}) — proje kökünde olmayabilirsin.`);
+  const choice = await p4.select({
+    message: "Nasıl devam edelim?",
+    options: [
+      { value: "here", label: "Yine de burada kur" },
+      { value: "path", label: "Başka bir proje dizini gir" },
+      { value: "cancel", label: "İptal et" }
+    ]
+  });
+  if (p4.isCancel(choice) || choice === "cancel")
+    return null;
+  if (choice === "here")
+    return cwd;
+  for (;; ) {
+    const entered = await p4.text({ message: "Proje dizini yolu", placeholder: "./my-app" });
+    if (p4.isCancel(entered))
+      return null;
+    const abs = resolve2(String(entered).trim());
+    if (existsSync11(abs))
+      return abs;
+    p4.log.error(`Dizin bulunamadı: ${abs}`);
+  }
+}
 async function runWizard(opts) {
   if (process.stdout.isTTY)
     process.stdout.write(banner());
   p4.intro(c3.dim("otonom kurulum başlıyor — auth → workspace → install → wire"));
+  if (!opts.yes) {
+    const target = await confirmTargetDir(opts.cwd);
+    if (target === null) {
+      p4.cancel("İptal edildi.");
+      process.exit(0);
+    }
+    opts.cwd = target;
+  }
   const TOTAL = 6;
   const phase = (n2, label) => {
     p4.log.step(`${c3.dim(`[${n2}/${TOTAL}]`)} ${c3.bold(label)}`);

package/dist/commands/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":"AA+BA,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;EAqGnB,CAAC;AAEH,eAAO,MAAM,SAAS;;;;;EAoBpB,CAAC;AAEH,eAAO,MAAM,SAAS,qDAkCpB,CAAC"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":"AA2BA,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;EAiEnB,CAAC;AAEH,eAAO,MAAM,SAAS;;;;;EAuBpB,CAAC;AAEH,eAAO,MAAM,SAAS,qDA6CpB,CAAC"}

package/dist/index.js

@@ -38876,27 +38876,60 @@ class ApiClient {
       "User-Agent": "@gurulu/cli",
       ...extra
     };
-    if (this.opts.apiKey) {
+    if (this.opts.bearer) {
+      h2.Authorization = `Bearer ${this.opts.bearer}`;
+    } else if (this.opts.apiKey) {
       h2["X-Gurulu-Api-Key"] = this.opts.apiKey;
     }
     return h2;
   }
   async get(path, query) {
     const qs = query ? `?${new URLSearchParams(Object.fromEntries(Object.entries(query).map(([k2, v2]) => [k2, String(v2)]))).toString()}` : "";
-    const res = await $request(`${this.opts.endpoint}${path}${qs}`, {
-      method: "GET",
-      headers: this.headers()
-    });
-    return this.handle(res);
+    return this.send("GET", `${path}${qs}`);
   }
   async post(path, body) {
-    const res = await $request(`${this.opts.endpoint}${path}`, {
-      method: "POST",
-      headers: this.headers({ "Content-Type": "application/json" }),
-      body: JSON.stringify(body ?? {})
+    return this.send("POST", path, body);
+  }
+  async send(method, pathWithQs, body, retried = false) {
+    const res = await $request(`${this.opts.endpoint}${pathWithQs}`, {
+      method,
+      headers: method === "POST" ? this.headers({ "Content-Type": "application/json" }) : this.headers(),
+      ...method === "POST" ? { body: JSON.stringify(body ?? {}) } : {}
     });
+    if (res.statusCode === 401 && this.opts.bearer && this.opts.refresh && !retried) {
+      await res.body.text().catch(() => "");
+      if (await this.refreshBearer()) {
+        return this.send(method, pathWithQs, body, true);
+      }
+    }
     return this.handle(res);
   }
+  async refreshBearer() {
+    const rc = this.opts.refresh;
+    if (!rc)
+      return false;
+    try {
+      const res = await $request(`${this.opts.endpoint}/v1/cli/auth/refresh`, {
+        method: "POST",
+        headers: {
+          Accept: "application/json",
+          "Content-Type": "application/json",
+          "User-Agent": "@gurulu/cli"
+        },
+        body: JSON.stringify({ refresh_token: rc.refreshToken })
+      });
+      const text = await res.body.text();
+      if (res.statusCode < 200 || res.statusCode >= 300)
+        return false;
+      const t2 = JSON.parse(text);
+      this.opts.bearer = t2.access_token;
+      rc.refreshToken = t2.refresh_token;
+      rc.onRotate(t2);
+      return true;
+    } catch {
+      return false;
+    }
+  }
   listWorkspaces() {
     return this.get("/v1/cli/workspaces");
   }
@@ -38906,6 +38939,15 @@ class ApiClient {
   issueWriteKey(workspaceId) {
     return this.post(`/v1/cli/workspaces/${encodeURIComponent(workspaceId)}/write-key`, {});
   }
+  identityListWorkspaces() {
+    return this.get("/v1/workspaces");
+  }
+  identityCreateWorkspace(body) {
+    return this.post("/v1/workspaces", body);
+  }
+  mintWorkspaceKey(workspaceId, body) {
+    return this.post(`/v1/workspaces/${encodeURIComponent(workspaceId)}/keys`, body);
+  }
   planEvents(body) {
     return this.post("/v1/cli/ai/plan-events", body);
   }
@@ -39005,6 +39047,21 @@ function writeGlobalCredentials(creds) {
     chmodSync(path, 384);
   } catch {}
 }
+function readIdentity() {
+  return readGlobalCredentials().identity ?? null;
+}
+function writeIdentity(identity) {
+  const creds = readGlobalCredentials();
+  creds.identity = identity;
+  writeGlobalCredentials(creds);
+}
+function clearIdentity() {
+  const creds = readGlobalCredentials();
+  if (creds.identity) {
+    delete creds.identity;
+    writeGlobalCredentials(creds);
+  }
+}
 function findCredentialForWorkspace(workspaceId) {
   const creds = readGlobalCredentials();
   return creds.workspaces.find((w2) => w2.workspace_id === workspaceId) ?? null;
@@ -39401,8 +39458,92 @@ var auditCmd = defineCommand({
 });
 
 // src/commands/auth.ts
-var POLL_INTERVAL_MS = 5000;
+import open from "open";
+
+// src/lib/identity.ts
+function identityClient(id) {
+  return new ApiClient({
+    endpoint: id.endpoint,
+    bearer: id.access_token,
+    refresh: {
+      refreshToken: id.refresh_token,
+      onRotate: (t2) => {
+        const cur = readIdentity();
+        if (!cur)
+          return;
+        writeIdentity({
+          ...cur,
+          access_token: t2.access_token,
+          refresh_token: t2.refresh_token,
+          expires_at: t2.expires_in != null ? new Date(Date.now() + t2.expires_in * 1000).toISOString() : cur.expires_at,
+          last_used: new Date().toISOString()
+        });
+      }
+    }
+  });
+}
 var POLL_MAX_ATTEMPTS = 180;
+function sleep(ms) {
+  return new Promise((r3) => setTimeout(r3, ms));
+}
+function toIdentity(endpoint, token) {
+  return {
+    access_token: token.access_token,
+    refresh_token: token.refresh_token ?? "",
+    expires_at: token.expires_in != null ? new Date(Date.now() + token.expires_in * 1000).toISOString() : new Date(Date.now() + 6 * 24 * 60 * 60 * 1000).toISOString(),
+    endpoint,
+    user_id: token.user_id,
+    last_used: new Date().toISOString()
+  };
+}
+async function runDeviceFlowIdentity(endpoint, display) {
+  const client = new ApiClient({ endpoint });
+  const start = await client.post("/v1/cli/auth/device", {
+    client_name: "@gurulu/cli",
+    grant_type: "identity"
+  });
+  const url = start.verification_url_complete || start.verification_url;
+  display.onPrompt(start.user_code, url);
+  if (display.openBrowser) {
+    try {
+      await display.openBrowser(url);
+    } catch {}
+  }
+  display.onWaiting?.();
+  const interval = Math.max((start.interval ?? 5) * 1000, 3000);
+  for (let i2 = 0;i2 < POLL_MAX_ATTEMPTS; i2++) {
+    await sleep(interval);
+    try {
+      const token = await client.post("/v1/cli/auth/token", {
+        device_code: start.device_code
+      });
+      if (token.access_token && token.refresh_token) {
+        const id = toIdentity(endpoint, token);
+        writeIdentity(id);
+        return id;
+      }
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      if (msg.includes("AUTHORIZATION_PENDING"))
+        continue;
+      if (msg.includes("ACCESS_DENIED"))
+        throw new Error("Yetkilendirme reddedildi");
+      if (msg.includes("EXPIRED_TOKEN"))
+        throw new Error("Kod süresi doldu — tekrar dene");
+    }
+  }
+  throw new Error("device flow zaman aşımına uğradı");
+}
+function loadIdentity(endpoint) {
+  const id = readIdentity();
+  if (!id?.refresh_token)
+    return null;
+  if (id.endpoint !== endpoint)
+    return null;
+  return id;
+}
+
+// src/commands/auth.ts
 var loginCmd = defineCommand({
   meta: {
     name: "login",
@@ -39436,54 +39577,27 @@ var loginCmd = defineCommand({
       console.log(`[gurulu] credential saved for workspace ${workspaceId}`);
       return;
     }
-    const client = new ApiClient({ endpoint });
-    let start;
     try {
-      start = await client.post("/v1/cli/auth/device", {
-        client_name: "@gurulu/cli"
+      const id = await runDeviceFlowIdentity(endpoint, {
+        onPrompt: (userCode, url) => {
+          console.log(`[gurulu] visit ${url}`);
+          console.log(`[gurulu] code:  ${userCode}`);
+          console.log("[gurulu] waiting for browser approval (~15m)...");
+        },
+        openBrowser: async (url) => {
+          await open(url);
+        }
       });
+      console.log(`
+[gurulu] signed in ✓ — account session stored (reused across projects + MCP)`);
+      if (id.user_id) {
+        console.log(`[gurulu] user: ${id.user_id}`);
+      }
     } catch (err) {
-      console.error(`[gurulu] device authorization failed: ${err instanceof Error ? err.message : String(err)}`);
+      console.error(`
+[gurulu] login failed: ${err instanceof Error ? err.message : String(err)}`);
       process.exit(1);
     }
-    console.log(`[gurulu] visit ${start.verification_url}`);
-    console.log(`[gurulu] enter code: ${start.user_code}`);
-    console.log(`[gurulu] or follow: ${start.verification_url_complete}
-`);
-    console.log(`[gurulu] polling (${POLL_MAX_ATTEMPTS * 5}s timeout)...`);
-    const interval = (start.interval ?? 5) * 1000;
-    for (let i2 = 0;i2 < POLL_MAX_ATTEMPTS; i2++) {
-      await sleep(Math.max(interval, POLL_INTERVAL_MS));
-      try {
-        const token = await client.post("/v1/cli/auth/token", {
-          device_code: start.device_code
-        });
-        if (token.access_token) {
-          upsertCredential({
-            workspace_id: token.workspace_id,
-            api_key: token.access_token,
-            endpoint,
-            last_used: new Date().toISOString()
-          });
-          console.log(`
-[gurulu] authorized — workspace ${token.workspace_id}`);
-          return;
-        }
-      } catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        if (msg.includes("AUTHORIZATION_PENDING") || err.code === "AUTHORIZATION_PENDING") {
-          continue;
-        }
-        if (msg.includes("ACCESS_DENIED") || msg.includes("EXPIRED_TOKEN")) {
-          console.error(`
-[gurulu] device flow ended: ${msg}`);
-          process.exit(1);
-        }
-      }
-    }
-    console.error(`
-[gurulu] timed out waiting for authorization`);
-    process.exit(1);
   }
 });
 var logoutCmd = defineCommand({
@@ -39501,14 +39615,23 @@ var logoutCmd = defineCommand({
     const creds = readGlobalCredentials();
     for (const w2 of creds.workspaces)
       removeCredential(w2.workspace_id);
-    console.log(`[gurulu] removed ${creds.workspaces.length} credential(s)`);
+    clearIdentity();
+    console.log(`[gurulu] signed out — removed ${creds.workspaces.length} workspace credential(s) + account session`);
   }
 });
 var whoamiCmd = defineCommand({
   meta: { name: "whoami", description: "Show active credentials + workspace info" },
   async run() {
+    const identity = readIdentity();
+    if (identity) {
+      console.log(`[gurulu] account session: active${identity.user_id ? ` (user ${identity.user_id})` : ""} @ ${identity.endpoint}`);
+    }
     const cred = resolveActiveCredential({});
     if (!cred) {
+      if (identity) {
+        console.log("[gurulu] no workspace bound yet — run `gurulu init` in a project");
+        return;
+      }
       console.log("[gurulu] not logged in — run `gurulu login`");
       process.exit(1);
     }
@@ -39525,13 +39648,11 @@ var whoamiCmd = defineCommand({
     }
   }
 });
-function sleep(ms) {
-  return new Promise((r3) => setTimeout(r3, ms));
-}
 
 // src/wizard/run.ts
 import { existsSync as existsSync11, mkdirSync as mkdirSync3, readFileSync as readFileSync12, writeFileSync as writeFileSync11 } from "node:fs";
-import { dirname as dirname5, join as join11 } from "node:path";
+import { homedir as homedir3 } from "node:os";
+import { dirname as dirname5, join as join11, resolve as resolve2 } from "node:path";
 import * as p4 from "@clack/prompts";
 
 // src/commands/pull.ts
@@ -40478,8 +40599,8 @@ function buildInstallPlan(detected, ctx = {}) {
 
 // src/lib/ui.ts
 var noColor = Boolean(process.env.NO_COLOR) || process.env.TERM === "dumb" || !process.stdout.isTTY;
-function wrap(open, close) {
-  return (s2) => noColor ? s2 : `\x1B[${open}m${s2}\x1B[${close}m`;
+function wrap(open2, close) {
+  return (s2) => noColor ? s2 : `\x1B[${open2}m${s2}\x1B[${close}m`;
 }
 function fg(code) {
   return (s2) => noColor ? s2 : `\x1B[38;5;${code}m${s2}\x1B[39m`;
@@ -40766,7 +40887,16 @@ function buildAugmentTask(competitors) {
 
 // src/wizard/auth.ts
 import * as p from "@clack/prompts";
-import open from "open";
+import open2 from "open";
+var SECRET_SCOPES = [
+  "admin",
+  "ingest",
+  "observability",
+  "registry.read",
+  "registry.write",
+  "events.read",
+  "events.write"
+];
 async function ensureAuth(opts) {
   const endpoint = opts.endpoint ?? DEFAULT_ENDPOINT;
   if (opts.apiKey) {
@@ -40792,57 +40922,80 @@ async function ensureAuth(opts) {
       endpoint: existing.endpoint
     };
   }
-  return deviceFlow(endpoint);
+  return identityWorkspaceFlow(endpoint, opts.workspaceId);
 }
-async function deviceFlow(endpoint) {
-  const client = new ApiClient({ endpoint });
-  const start = await client.post("/v1/cli/auth/device", {
-    client_name: "@gurulu/cli"
-  });
-  const url = start.verification_url_complete || start.verification_url;
-  p.note(`${start.user_code}
-
-${url}`, "Tarayıcıda onayla");
-  try {
-    await open(url);
-  } catch {
-    p.log.warn("Tarayıcı otomatik açılamadı — yukarıdaki linki elle aç.");
-  }
-  const s2 = p.spinner();
-  s2.start("Tarayıcıda onay bekleniyor…");
-  const interval = Math.max((start.interval ?? 5) * 1000, 3000);
-  const maxAttempts = 180;
-  for (let i2 = 0;i2 < maxAttempts; i2++) {
-    await sleep2(interval);
-    try {
-      const token = await client.post("/v1/cli/auth/token", {
-        device_code: start.device_code
-      });
-      if (token.access_token) {
-        upsertCredential({
-          workspace_id: token.workspace_id,
-          api_key: token.access_token,
-          endpoint,
-          last_used: new Date().toISOString()
-        });
-        s2.stop("Yetkilendirildi ✓");
-        return { apiKey: token.access_token, workspaceId: token.workspace_id, endpoint };
+async function identityWorkspaceFlow(endpoint, wantWorkspaceId) {
+  let id = loadIdentity(endpoint);
+  if (!id) {
+    const spin = p.spinner();
+    id = await runDeviceFlowIdentity(endpoint, {
+      onPrompt: (userCode, url) => p.note(`${userCode}
+
+${url}`, "Tarayıcıda hesabına giriş yap"),
+      onWaiting: () => spin.start("Tarayıcıda onay bekleniyor…"),
+      openBrowser: async (url) => {
+        await open2(url);
       }
-    } catch (err) {
-      const msg = err instanceof Error ? err.message : String(err);
-      if (msg.includes("AUTHORIZATION_PENDING"))
-        continue;
-      if (msg.includes("ACCESS_DENIED") || msg.includes("EXPIRED_TOKEN")) {
-        s2.stop("Yetkilendirme reddedildi / süresi doldu", 1);
-        throw new Error(msg);
-      }
-    }
+    });
+    spin.stop("Giriş yapıldı ✓ (bu cihaz artık kayıtlı — bir daha login gerekmez)");
   }
-  s2.stop("Zaman aşımı", 1);
-  throw new Error("device flow zaman aşımına uğradı");
+  const client = identityClient(id);
+  let workspaceId = wantWorkspaceId;
+  if (!workspaceId) {
+    const list = await client.identityListWorkspaces().catch(() => ({ workspaces: [] }));
+    workspaceId = await selectOrCreateWorkspace(client, list.workspaces ?? []);
+  }
+  const mint = await client.mintWorkspaceKey(workspaceId, {
+    name: "Gurulu CLI",
+    type: "secret",
+    scopes: SECRET_SCOPES
+  });
+  upsertCredential({
+    workspace_id: workspaceId,
+    api_key: mint.key,
+    endpoint,
+    last_used: new Date().toISOString()
+  });
+  return { apiKey: mint.key, workspaceId, endpoint };
 }
-function sleep2(ms) {
-  return new Promise((r3) => setTimeout(r3, ms));
+async function selectOrCreateWorkspace(client, workspaces) {
+  if (workspaces.length === 0)
+    return createWorkspace(client);
+  const choice = await p.select({
+    message: "Hangi workspace? (var olanı kullan ya da yeni oluştur)",
+    options: [
+      ...workspaces.map((w2) => ({
+        value: w2.workspace_id,
+        label: `${w2.name}${w2.slug ? ` (${w2.slug})` : ""}`
+      })),
+      { value: "__new__", label: "+ Yeni workspace oluştur" }
+    ]
+  });
+  if (p.isCancel(choice))
+    throw new Error("iptal edildi");
+  return choice === "__new__" ? createWorkspace(client) : String(choice);
+}
+async function createWorkspace(client) {
+  const name = await p.text({
+    message: "Workspace adı",
+    placeholder: "my-app",
+    validate: (v2) => v2 && v2.trim().length >= 1 ? undefined : "gerekli"
+  });
+  if (p.isCancel(name))
+    throw new Error("iptal edildi");
+  const domain = await p.text({
+    message: "Site domain",
+    placeholder: "example.com",
+    initialValue: "example.com",
+    validate: (v2) => v2 && v2.trim().length >= 3 ? undefined : "en az 3 karakter"
+  });
+  if (p.isCancel(domain))
+    throw new Error("iptal edildi");
+  const ws = await client.identityCreateWorkspace({
+    name: String(name).trim(),
+    domain: String(domain).trim()
+  });
+  return ws.workspace_id;
 }
 
 // src/wizard/checkpoint.ts
@@ -41241,7 +41394,7 @@ async function runFeatures(client, detected, opts) {
   const s2 = p2.spinner();
   s2.start("Özellikler registry'ye kuruluyor…");
   try {
-    await client.post("/features/register", { features: selectedKeys });
+    await client.post("/v1/cli/features/register", { features: selectedKeys });
     s2.stop(c3.neon(`✓ ${selected.length} özellik kuruldu`));
   } catch (err) {
     const detail = err && typeof err === "object" && "status" in err ? `${err.status} ${err.message ?? ""}`.trim() : err instanceof Error ? err.message : String(err);
@@ -41697,10 +41850,45 @@ function bail() {
   p4.cancel("İptal edildi.");
   process.exit(0);
 }
+async function confirmTargetDir(cwd) {
+  const isHome = cwd === homedir3();
+  if (existsSync11(join11(cwd, "package.json")) && !isHome)
+    return cwd;
+  p4.log.warn(isHome ? `Ana dizinde kurulum yapmak üzeresin (${cwd}) — genelde yanlış; SDK'yı proje dizininde çalıştır.` : `Bu dizinde package.json yok (${cwd}) — proje kökünde olmayabilirsin.`);
+  const choice = await p4.select({
+    message: "Nasıl devam edelim?",
+    options: [
+      { value: "here", label: "Yine de burada kur" },
+      { value: "path", label: "Başka bir proje dizini gir" },
+      { value: "cancel", label: "İptal et" }
+    ]
+  });
+  if (p4.isCancel(choice) || choice === "cancel")
+    return null;
+  if (choice === "here")
+    return cwd;
+  for (;; ) {
+    const entered = await p4.text({ message: "Proje dizini yolu", placeholder: "./my-app" });
+    if (p4.isCancel(entered))
+      return null;
+    const abs = resolve2(String(entered).trim());
+    if (existsSync11(abs))
+      return abs;
+    p4.log.error(`Dizin bulunamadı: ${abs}`);
+  }
+}
 async function runWizard(opts) {
   if (process.stdout.isTTY)
     process.stdout.write(banner());
   p4.intro(c3.dim("otonom kurulum başlıyor — auth → workspace → install → wire"));
+  if (!opts.yes) {
+    const target = await confirmTargetDir(opts.cwd);
+    if (target === null) {
+      p4.cancel("İptal edildi.");
+      process.exit(0);
+    }
+    opts.cwd = target;
+  }
   const TOTAL = 6;
   const phase = (n2, label) => {
     p4.log.step(`${c3.dim(`[${n2}/${TOTAL}]`)} ${c3.bold(label)}`);

package/dist/lib/api.d.ts

@@ -1,6 +1,20 @@
+export interface RefreshConfig {
+    refreshToken: string;
+    /** Yeni token'lar geldiğinde persist (global credentials.identity güncelle). */
+    onRotate: (t: {
+        access_token: string;
+        refresh_token: string;
+        expires_in: number | null;
+    }) => void;
+}
 export interface ApiClientOptions {
     endpoint: string;
+    /** Workspace secret key (sk_) → X-Gurulu-Api-Key (apiKeyMiddleware). */
     apiKey?: string;
+    /** identity grant: user session access JWT → Authorization: Bearer (authMiddleware). */
+    bearer?: string;
+    /** bearer 401 alınca /auth/refresh ile bir kez yenile + retry. */
+    refresh?: RefreshConfig;
 }
 export interface ApiError {
     code: string;
@@ -22,10 +36,22 @@ export declare class ApiClient {
     private headers;
     get<T>(path: string, query?: Record<string, string | number>): Promise<T>;
     post<T>(path: string, body: unknown): Promise<T>;
+    private send;
+    private refreshBearer;
     listWorkspaces(): Promise<ListWorkspacesResponse>;
     createWorkspace(body: CreateWorkspaceBody): Promise<CreateWorkspaceResponse>;
     /** Mevcut workspace için taze public ingest key mint et (plaintext bir kez). */
     issueWriteKey(workspaceId: string): Promise<IssueWriteKeyResponse>;
+    /** Membership-based workspace listesi (genel endpoint, apiKeyMiddleware DEĞİL). */
+    identityListWorkspaces(): Promise<UserWorkspacesResponse>;
+    /** Yeni workspace (user JWT). */
+    identityCreateWorkspace(body: Record<string, unknown>): Promise<UserWorkspace>;
+    /** Seçilen workspace için sk_ mint (user JWT + rbac api_key.create). */
+    mintWorkspaceKey(workspaceId: string, body: {
+        name: string;
+        type: 'secret';
+        scopes: string[];
+    }): Promise<MintKeyResponse>;
     /** AI event planı (W2 gateway) — kod context'i → registry-bound plan. */
     planEvents(body: PlanEventsBody): Promise<PlanEventsResponse>;
     /** Yeni event önerisi → verification queue (W2.4 plan uygula). */
@@ -254,10 +280,28 @@ export interface DeviceStartResponse {
     interval: number;
 }
 export interface DeviceTokenResponse {
+    grant_type?: 'identity' | 'workspace';
     access_token: string;
     token_type: 'Bearer';
+    refresh_token?: string;
+    user_id?: string;
+    workspace_id?: string;
+    tenant_id?: string;
+    expires_in: number | null;
+}
+export interface UserWorkspace {
     workspace_id: string;
     tenant_id: string;
-    expires_in: number | null;
+    name: string;
+    slug: string;
+    tenant_name?: string;
+}
+export interface UserWorkspacesResponse {
+    workspaces: UserWorkspace[];
+}
+export interface MintKeyResponse {
+    id: string;
+    key: string;
+    key_prefix: string;
 }
 //# sourceMappingURL=api.d.ts.map

package/dist/lib/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/lib/api.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,YAAa,SAAQ,KAAK;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;gBACD,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE;CAKpE;AAED,qBAAa,SAAS;IACR,OAAO,CAAC,IAAI;gBAAJ,IAAI,EAAE,gBAAgB;IAE1C,OAAO,CAAC,OAAO;IAYT,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAazE,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC;IAUtD,cAAc,IAAI,OAAO,CAAC,sBAAsB,CAAC;IAIjD,eAAe,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAI5E,gFAAgF;IAChF,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAOlE,yEAAyE;IACzE,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAI7D,kEAAkE;IAClE,SAAS,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAIhE,+DAA+D;IAC/D,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAI1D;;;;OAIG;IACH,YAAY,CAAC,KAAK,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC;YAO7E,MAAM;CAqBrB;AAID,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,aAAa,GAAG,QAAQ,GAAG,SAAS,CAAC;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,oBAAoB;IACnC,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,aAAa,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,aAAa,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC3C,SAAS,EAAE,OAAO,GAAG,QAAQ,GAAG,YAAY,GAAG,UAAU,CAAC;IAC1D,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,gBAAgB,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IAClE,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,WAAW,GAAG,cAAc,GAAG,cAAc,CAAC;IACtD,MAAM,EAAE,KAAK,GAAG,YAAY,GAAG,iBAAiB,GAAG,WAAW,GAAG,aAAa,GAAG,aAAa,CAAC;IAC/F,OAAO,EAAE;QACP,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,aAAa,GAAG,QAAQ,GAAG,SAAS,CAAC;QACjD,gBAAgB,CAAC,EACb,QAAQ,GACR,SAAS,GACT,YAAY,GACZ,SAAS,GACT,YAAY,GACZ,OAAO,GACP,KAAK,CAAC;QACV,mBAAmB,CAAC,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAC7E,mBAAmB,CAAC,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KAC7D,CAAC;CACH;AAED,MAAM,WAAW,oBAAoB;IACnC,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,KAAK,CAAC;QACZ,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,aAAa,GAAG,QAAQ,GAAG,SAAS,CAAC;QACjD,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACrC,CAAC,CAAC;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE;QACR,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,EAAE;YAAE,WAAW,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC;QAClE,YAAY,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC;KACvF,CAAC;IACF,MAAM,EAAE;QACN,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;KAC/D,CAAC;IACF,OAAO,EAAE;QACP,iBAAiB,EAAE,MAAM,CAAC;QAC1B,oBAAoB,EAAE,OAAO,CAAC;KAC/B,CAAC;CACH;AAED,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,YAAY,GAAG,SAAS,GAAG,aAAa,CAAC;IACtD,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,YAAY,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,YAAY,GAAG,SAAS,GAAG,aAAa,CAAC;IACvD,WAAW,CAAC,EAAE,WAAW,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;CACpF;AAED,MAAM,WAAW,uBAAwB,SAAQ,YAAY;IAC3D,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAKD,MAAM,MAAM,UAAU,GAAG,aAAa,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE9D,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,UAAU,CAAC;IACvB,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,4BAA4B;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,gCAAgC;IAChC,QAAQ,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,CAAC;IACnD,QAAQ,EAAE,MAAM,CAAC;CAClB;AAID,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC7D;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC7B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,CAAC;IACtC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,8DAA8D;IAC9D,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,CAAC;IACnD,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,yBAAyB,EAAE,MAAM,CAAC;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,QAAQ,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/lib/api.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,QAAQ,EAAE,CAAC,CAAC,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,KAAK,IAAI,CAAC;CACnG;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wFAAwF;IACxF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,YAAa,SAAQ,KAAK;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;gBACD,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE;CAKpE;AAED,qBAAa,SAAS;IACR,OAAO,CAAC,IAAI;gBAAJ,IAAI,EAAE,gBAAgB;IAE1C,OAAO,CAAC,OAAO;IAeT,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IASzE,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC;YAIxC,IAAI;YAsBJ,aAAa;IA8B3B,cAAc,IAAI,OAAO,CAAC,sBAAsB,CAAC;IAIjD,eAAe,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAI5E,gFAAgF;IAChF,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAQlE,mFAAmF;IACnF,sBAAsB,IAAI,OAAO,CAAC,sBAAsB,CAAC;IAIzD,iCAAiC;IACjC,uBAAuB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC;IAI9E,wEAAwE;IACxE,gBAAgB,CACd,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,QAAQ,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,GACvD,OAAO,CAAC,eAAe,CAAC;IAO3B,yEAAyE;IACzE,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAI7D,kEAAkE;IAClE,SAAS,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAIhE,+DAA+D;IAC/D,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAI1D;;;;OAIG;IACH,YAAY,CAAC,KAAK,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC;YAO7E,MAAM;CAqBrB;AAID,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,aAAa,GAAG,QAAQ,GAAG,SAAS,CAAC;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,oBAAoB;IACnC,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,aAAa,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,aAAa,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC3C,SAAS,EAAE,OAAO,GAAG,QAAQ,GAAG,YAAY,GAAG,UAAU,CAAC;IAC1D,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,gBAAgB,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IAClE,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,WAAW,GAAG,cAAc,GAAG,cAAc,CAAC;IACtD,MAAM,EAAE,KAAK,GAAG,YAAY,GAAG,iBAAiB,GAAG,WAAW,GAAG,aAAa,GAAG,aAAa,CAAC;IAC/F,OAAO,EAAE;QACP,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,aAAa,GAAG,QAAQ,GAAG,SAAS,CAAC;QACjD,gBAAgB,CAAC,EACb,QAAQ,GACR,SAAS,GACT,YAAY,GACZ,SAAS,GACT,YAAY,GACZ,OAAO,GACP,KAAK,CAAC;QACV,mBAAmB,CAAC,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAC7E,mBAAmB,CAAC,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KAC7D,CAAC;CACH;AAED,MAAM,WAAW,oBAAoB;IACnC,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,KAAK,CAAC;QACZ,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,aAAa,GAAG,QAAQ,GAAG,SAAS,CAAC;QACjD,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACrC,CAAC,CAAC;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE;QACR,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,EAAE;YAAE,WAAW,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC;QAClE,YAAY,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC;KACvF,CAAC;IACF,MAAM,EAAE;QACN,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;KAC/D,CAAC;IACF,OAAO,EAAE;QACP,iBAAiB,EAAE,MAAM,CAAC;QAC1B,oBAAoB,EAAE,OAAO,CAAC;KAC/B,CAAC;CACH;AAED,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,YAAY,GAAG,SAAS,GAAG,aAAa,CAAC;IACtD,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,YAAY,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,YAAY,GAAG,SAAS,GAAG,aAAa,CAAC;IACvD,WAAW,CAAC,EAAE,WAAW,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;CACpF;AAED,MAAM,WAAW,uBAAwB,SAAQ,YAAY;IAC3D,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAKD,MAAM,MAAM,UAAU,GAAG,aAAa,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE9D,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,UAAU,CAAC;IACvB,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,4BAA4B;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,gCAAgC;IAChC,QAAQ,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,CAAC;IACnD,QAAQ,EAAE,MAAM,CAAC;CAClB;AAID,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC7D;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC7B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,CAAC;IACtC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,8DAA8D;IAC9D,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,CAAC;IACnD,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,yBAAyB,EAAE,MAAM,CAAC;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,CAAC,EAAE,UAAU,GAAG,WAAW,CAAC;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,QAAQ,CAAC;IAErB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAGD,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AACD,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,aAAa,EAAE,CAAC;CAC7B;AACD,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;CACpB"}

package/dist/lib/config.d.ts

@@ -13,9 +13,19 @@ export interface GlobalCredentialEntry {
     endpoint: string;
     last_used: string;
 }
+export interface IdentityCredential {
+    access_token: string;
+    refresh_token: string;
+    /** Access token expiry (ISO) — dolunca refresh. */
+    expires_at: string;
+    endpoint: string;
+    user_id?: string;
+    last_used: string;
+}
 export interface GlobalCredentials {
     workspaces: GlobalCredentialEntry[];
     default_workspace_id?: string;
+    identity?: IdentityCredential;
 }
 export declare const DEFAULT_ENDPOINT: string;
 export declare function projectRoot(cwd?: string): string;
@@ -29,6 +39,9 @@ export declare function readProjectConfig(cwd?: string): ProjectConfig | null;
 export declare function writeProjectConfig(cfg: ProjectConfig, cwd?: string): void;
 export declare function readGlobalCredentials(): GlobalCredentials;
 export declare function writeGlobalCredentials(creds: GlobalCredentials): void;
+export declare function readIdentity(): IdentityCredential | null;
+export declare function writeIdentity(identity: IdentityCredential): void;
+export declare function clearIdentity(): void;
 export declare function findCredentialForWorkspace(workspaceId: string): GlobalCredentialEntry | null;
 export declare function upsertCredential(entry: GlobalCredentialEntry): void;
 export declare function removeCredential(workspaceId: string): boolean;

package/dist/lib/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC;IACzC,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,qBAAqB;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,qBAAqB,EAAE,CAAC;IACpC,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,eAAO,MAAM,gBAAgB,QAAyD,CAAC;AAEvF,wBAAgB,WAAW,CAAC,GAAG,GAAE,MAAsB,GAAG,MAAM,CAE/D;AAED,wBAAgB,iBAAiB,CAAC,GAAG,GAAE,MAAsB,GAAG,MAAM,CAErE;AAED,wBAAgB,mBAAmB,CAAC,GAAG,GAAE,MAAsB,GAAG,MAAM,CAEvE;AAED,wBAAgB,oBAAoB,CAAC,GAAG,GAAE,MAAsB,GAAG,MAAM,CAExE;AAED,wBAAgB,uBAAuB,CAAC,GAAG,GAAE,MAAsB,GAAG,MAAM,CAE3E;AAED,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAG5C;AAED,wBAAgB,iBAAiB,CAAC,GAAG,GAAE,MAAsB,GAAG,aAAa,GAAG,IAAI,CAQnF;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,aAAa,EAAE,GAAG,GAAE,MAAsB,GAAG,IAAI,CAIxF;AAED,wBAAgB,qBAAqB,IAAI,iBAAiB,CAQzD;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,iBAAiB,GAAG,IAAI,CAWrE;AAED,wBAAgB,0BAA0B,CAAC,WAAW,EAAE,MAAM,GAAG,qBAAqB,GAAG,IAAI,CAG5F;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,IAAI,CAUnE;AAED,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAO7D;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GAAG;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAmBnE"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC;IACzC,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,qBAAqB;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAID,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,mDAAmD;IACnD,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,qBAAqB,EAAE,CAAC;IACpC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,EAAE,kBAAkB,CAAC;CAC/B;AAED,eAAO,MAAM,gBAAgB,QAAyD,CAAC;AAEvF,wBAAgB,WAAW,CAAC,GAAG,GAAE,MAAsB,GAAG,MAAM,CAE/D;AAED,wBAAgB,iBAAiB,CAAC,GAAG,GAAE,MAAsB,GAAG,MAAM,CAErE;AAED,wBAAgB,mBAAmB,CAAC,GAAG,GAAE,MAAsB,GAAG,MAAM,CAEvE;AAED,wBAAgB,oBAAoB,CAAC,GAAG,GAAE,MAAsB,GAAG,MAAM,CAExE;AAED,wBAAgB,uBAAuB,CAAC,GAAG,GAAE,MAAsB,GAAG,MAAM,CAE3E;AAED,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAG5C;AAED,wBAAgB,iBAAiB,CAAC,GAAG,GAAE,MAAsB,GAAG,aAAa,GAAG,IAAI,CAQnF;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,aAAa,EAAE,GAAG,GAAE,MAAsB,GAAG,IAAI,CAIxF;AAED,wBAAgB,qBAAqB,IAAI,iBAAiB,CAQzD;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,iBAAiB,GAAG,IAAI,CAWrE;AAGD,wBAAgB,YAAY,IAAI,kBAAkB,GAAG,IAAI,CAExD;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAIhE;AAED,wBAAgB,aAAa,IAAI,IAAI,CAMpC;AAED,wBAAgB,0BAA0B,CAAC,WAAW,EAAE,MAAM,GAAG,qBAAqB,GAAG,IAAI,CAG5F;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,IAAI,CAUnE;AAED,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAO7D;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GAAG;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAmBnE"}

package/dist/lib/identity.d.ts

@@ -0,0 +1,21 @@
+import { ApiClient } from './api.ts';
+import { type IdentityCredential } from './config.ts';
+/** ApiClient'ı identity (bearer + auto-refresh persist) ile kur. */
+export declare function identityClient(id: IdentityCredential): ApiClient;
+export interface DeviceFlowDisplay {
+    /** user_code + verification URL'i kullanıcıya göster. */
+    onPrompt: (userCode: string, url: string) => void;
+    /** Poll başladı (spinner vb.). */
+    onWaiting?: () => void;
+    /** Tarayıcı otomatik açma callback'i (opsiyonel — CLI `open` ile). */
+    openBrowser?: (url: string) => Promise<void>;
+}
+/** Identity device flow — browser onayı → user session token'ı sakla + döndür. */
+export declare function runDeviceFlowIdentity(endpoint: string, display: DeviceFlowDisplay): Promise<IdentityCredential>;
+/**
+ * Kayıtlı identity'yi döndür (varsa) — yoksa null. Access token dolmuş olsa bile
+ * döner; ApiClient 401'de otomatik refresh eder. Endpoint uyuşmazsa (farklı
+ * backend) null (yeni login gerekir).
+ */
+export declare function loadIdentity(endpoint: string): IdentityCredential | null;
+//# sourceMappingURL=identity.d.ts.map

package/dist/lib/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../src/lib/identity.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,SAAS,EAAsD,MAAM,UAAU,CAAC;AACzF,OAAO,EAAE,KAAK,kBAAkB,EAA+B,MAAM,aAAa,CAAC;AAEnF,oEAAoE;AACpE,wBAAgB,cAAc,CAAC,EAAE,EAAE,kBAAkB,GAAG,SAAS,CAsBhE;AAED,MAAM,WAAW,iBAAiB;IAChC,yDAAyD;IACzD,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAClD,kCAAkC;IAClC,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC;IACvB,sEAAsE;IACtE,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9C;AAsBD,kFAAkF;AAClF,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,kBAAkB,CAAC,CAuC7B;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI,CAKxE"}

package/dist/wizard/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/wizard/auth.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,wBAAsB,UAAU,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC,CAkC7E"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/wizard/auth.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAYD,wBAAsB,UAAU,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC,CAkC7E"}

package/dist/wizard/run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/wizard/run.ts"],"names":[],"mappings":"AAqCA,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,0DAA0D;IAC1D,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,4CAA4C;IAC5C,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,sFAAsF;IACtF,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AA6BD,wBAAsB,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAkblE"}
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/wizard/run.ts"],"names":[],"mappings":"AAsCA,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,0DAA0D;IAC1D,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,4CAA4C;IAC5C,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,sFAAsF;IACtF,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AA0DD,wBAAsB,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CA4blE"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gurulu/cli",
-  "version": "1.5.5",
+  "version": "1.6.0",
   "private": false,
   "license": "BUSL-1.1",
   "publishConfig": {