@objectstack/cli 4.0.4 → 4.1.0

package/README.md

@@ -63,12 +63,7 @@ Available generate types: `object`, `view`, `action`, `flow`, `agent`, `dashboar
 
 ### Plugin Management
 
-| Command | Description |
-|---------|-------------|
-| `os plugin list [config]` | List plugins defined in configuration (alias: `os plugin ls`) |
-| `os plugin info <name> [config]` | Show detailed plugin information |
-| `os plugin add <package>` | Add a plugin import and entry to config |
-| `os plugin remove <name>` | Remove a plugin from config (alias: `os plugin rm`) |
+Runtime plugins (declared in `objectstack.config.ts` `plugins`) are loaded automatically by `os serve` / `os dev`. There is no `os plugin` command group in v1; project-level dependency management and marketplace distribution will arrive with the Cloud Projects model. To distribute a build today, use `os build` (or `os compile`) and bind the artifact via `os projects bind <id> --artifact dist/objectstack.json`.
 
 ### Quality
 
@@ -144,18 +139,9 @@ export default defineStack({
 
 - `-d, --dir <directory>` — Override target directory
 
-### `os plugin list`
-
-- `--json` — Output as JSON
-
-### `os plugin add`
-
-- `-d, --dev` — Add as a dev-only plugin
-- `-c, --config <path>` — Configuration file path
+### `os plugins` (oclif)
 
-### `os plugin remove`
-
-- `-c, --config <path>` — Configuration file path
+`os plugins install`, `os plugins uninstall`, `os plugins update`, and friends come from `@oclif/plugin-plugins`. They install third-party CLI extensions (oclif plugins), not runtime plugins for an ObjectStack project. See [oclif's plugin docs](https://oclif.io/docs/plugins) for the full surface.
 
 ### `os info`
 
@@ -237,10 +223,10 @@ os init                          # 1. Create project
 os generate object customer      # 2. Add a Customer object
 os generate object order         # 3. Add an Order object  
 os generate view customer        # 4. Add a list view
-os plugin add @objectstack/plugin-auth  # 5. Add auth plugin
-os validate                      # 6. Validate everything
-os dev                           # 7. Start dev server
-os compile                       # 8. Build for production
+os validate                      # 5. Validate everything
+os dev                           # 6. Start dev server
+os compile                       # 7. Build for production
+os projects bind <id> --artifact dist/objectstack.json  # 8. Bind to a Cloud Project
 ```
 
 ## Architecture
@@ -255,11 +241,12 @@ os compile                       # 8. Build for production
 │   ├── compile.ts              # os compile
 │   ├── validate.ts             # os validate
 │   ├── generate.ts             # os generate (alias: g)
-│   ├── plugin/                 # os plugin <subcommand>
+│   ├── projects/               # os projects <subcommand>
 │   │   ├── list.ts
-│   │   ├── info.ts
-│   │   ├── add.ts
-│   │   └── remove.ts
+│   │   ├── show.ts
+│   │   ├── create.ts
+│   │   ├── switch.ts
+│   │   └── bind.ts
 │   ├── codemod/                # os codemod <subcommand>
 │   │   └── v2-to-v3.ts
 │   └── ...
@@ -267,6 +254,38 @@ os compile                       # 8. Build for production
 └── package.json                # oclif config under "oclif" key
 ```
 
+
+## Default capability slate (always-on)
+
+`objectstack serve` (and `os dev`) auto-mount a baseline slate of
+service plugins for every preset **except** `--preset minimal`:
+
+| Capability  | Plugin                       | Why default                                                  |
+|-------------|------------------------------|--------------------------------------------------------------|
+| `queue`     | `QueueServicePlugin`         | Background retries (mail, audit batching) need a queue.      |
+| `job`       | `JobServicePlugin`           | Scheduled jobs (cleanup, reports, cron).                     |
+| `cache`     | `CacheServicePlugin`         | In-memory adapter; performance baseline.                     |
+| `settings`  | `SettingsServicePlugin`      | Mail / storage / branding / feature-flag UI + persistence.   |
+| `email`     | `EmailServicePlugin`         | Auth callbacks (verify, reset, magic-link) hard-depend.      |
+| `storage`   | `StorageServicePlugin`       | Avatars, attachments, exports. Local fallback in dev.        |
+
+Apps no longer need to list these in `requires: [...]`.
+
+**Opt-out:** run `objectstack serve --preset minimal` to skip the slate
+and only load core + your explicit `requires`.
+
+**Built-in Settings manifests:** `mail`, `storage`, `branding`,
+`feature_flags` are pre-registered. Both `mail` and `storage` expose a
+"Test connection" action that exercises the live transport / adapter
+end-to-end. Switching the storage adapter does **not** migrate
+previously uploaded files — the plugin logs a warning on every swap.
+
+**Storage warning:** when no `storage:` block is configured the plugin
+falls back to the local driver under `.objectstack/data/uploads/`. In
+non-dev mode a single `console.warn` fires at boot — switch to S3/GCS/
+Azure for production by setting `config.storage`, `OS_STORAGE_*` env,
+or via the Settings hub (`namespace=storage`).
+
 ## License
 
 Apache-2.0

package/dist/commands/build.d.ts

@@ -0,0 +1,5 @@
+import Compile from './compile.js';
+export default class Build extends Compile {
+    static description: string;
+}
+//# sourceMappingURL=build.d.ts.map

package/dist/commands/build.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../src/commands/build.ts"],"names":[],"mappings":"AAEA,OAAO,OAAO,MAAM,cAAc,CAAC;AAEnC,MAAM,CAAC,OAAO,OAAO,KAAM,SAAQ,OAAO;IACxC,OAAgB,WAAW,SAA4E;CACxG"}

package/dist/commands/build.js

@@ -0,0 +1,6 @@
+// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.
+import Compile from './compile.js';
+export default class Build extends Compile {
+    static description = 'Compile ObjectStack configuration to JSON artifact (alias for compile)';
+}
+//# sourceMappingURL=build.js.map

package/dist/commands/build.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.js","sourceRoot":"","sources":["../../src/commands/build.ts"],"names":[],"mappings":"AAAA,yEAAyE;AAEzE,OAAO,OAAO,MAAM,cAAc,CAAC;AAEnC,MAAM,CAAC,OAAO,OAAO,KAAM,SAAQ,OAAO;IACxC,MAAM,CAAU,WAAW,GAAG,wEAAwE,CAAC"}

package/dist/commands/cloud/login.d.ts

@@ -0,0 +1,16 @@
+import { Command } from '@oclif/core';
+export default class CloudLogin extends Command {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        url: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
+        email: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        password: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        'no-browser': import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        force: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+    private fallbackPasswordPrompt;
+}
+//# sourceMappingURL=login.d.ts.map

package/dist/commands/cloud/login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../src/commands/cloud/login.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,OAAO,EAAS,MAAM,aAAa,CAAC;AAoD7C,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,OAAO;IAC7C,OAAgB,WAAW,SACgG;IAE3H,OAAgB,QAAQ,WAKtB;IAEF,OAAgB,KAAK;;;;;;;MAmBnB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;YAqEZ,sBAAsB;CAQrC"}

package/dist/commands/cloud/login.js

@@ -0,0 +1,166 @@
+// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.
+/**
+ * `objectstack cloud login` — authenticate against the ObjectStack Cloud
+ * package registry (`https://cloud.objectos.app` by default).
+ *
+ * This is distinct from `os login`, which authenticates against your
+ * *runtime* ObjectOS instance. Cloud credentials are persisted to
+ * `~/.objectstack/cloud.json` and consumed by `os package publish`,
+ * `os package install`, and any future marketplace commands.
+ */
+import * as readline from 'node:readline/promises';
+import { stdin as input, stdout as output } from 'node:process';
+import { Command, Flags } from '@oclif/core';
+import { printHeader, printKV, printSuccess, printError } from '../../utils/format.js';
+import { loginWithBrowser, loginWithPassword } from '../../utils/auth-flows.js';
+import { DEFAULT_CLOUD_URL, readCloudConfig, writeCloudConfig } from '../../utils/cloud-config.js';
+async function promptPassword(promptText) {
+    if (!process.stdin.isTTY) {
+        const rl = readline.createInterface({ input, output });
+        const answer = await rl.question(promptText);
+        rl.close();
+        return answer;
+    }
+    return new Promise((resolve) => {
+        const chars = [];
+        process.stdout.write(promptText);
+        process.stdin.setRawMode(true);
+        process.stdin.resume();
+        process.stdin.setEncoding('utf8');
+        const cleanup = () => {
+            process.stdin.setRawMode(false);
+            process.stdin.pause();
+            process.stdin.removeListener('data', handler);
+            process.stdout.write('\n');
+        };
+        const handler = (char) => {
+            switch (char) {
+                case '\u0003':
+                    cleanup();
+                    process.kill(process.pid, 'SIGINT');
+                    break;
+                case '\r':
+                case '\n':
+                    cleanup();
+                    resolve(chars.join(''));
+                    break;
+                case '\u007f':
+                    if (chars.length > 0) {
+                        chars.pop();
+                        process.stdout.clearLine(0);
+                        process.stdout.cursorTo(0);
+                        process.stdout.write(promptText + '*'.repeat(chars.length));
+                    }
+                    break;
+                default:
+                    chars.push(char);
+                    process.stdout.write('*');
+            }
+        };
+        process.stdin.on('data', handler);
+    });
+}
+export default class CloudLogin extends Command {
+    static description = 'Authenticate against ObjectStack Cloud (the hosted package registry). Stores credentials in ~/.objectstack/cloud.json.';
+    static examples = [
+        '$ os cloud login',
+        '$ os cloud login --email me@acme.com --password secret',
+        '$ os cloud login --no-browser',
+        '$ os cloud login --url https://cloud.objectos.app   # default',
+    ];
+    static flags = {
+        url: Flags.string({
+            char: 'u',
+            description: 'ObjectStack Cloud URL (override for self-hosted control planes)',
+            default: DEFAULT_CLOUD_URL,
+            env: 'OS_CLOUD_URL',
+        }),
+        email: Flags.string({ char: 'e', description: 'Email address (skips browser flow)' }),
+        password: Flags.string({ char: 'p', description: 'Password (skips browser flow)' }),
+        'no-browser': Flags.boolean({
+            description: 'Print the verification URL without opening a browser',
+            default: false,
+        }),
+        force: Flags.boolean({
+            char: 'f',
+            description: 'Re-authenticate even if cloud credentials already exist',
+            default: false,
+        }),
+        json: Flags.boolean({ description: 'Output as JSON' }),
+    };
+    async run() {
+        const { flags } = await this.parse(CloudLogin);
+        try {
+            if (!flags.force) {
+                try {
+                    const existing = await readCloudConfig();
+                    if (existing?.token) {
+                        if (flags.json) {
+                            console.log(JSON.stringify({ success: false, error: 'Already logged in', email: existing.email, url: existing.url }));
+                        }
+                        else {
+                            printSuccess(`Already logged in to ${existing.url} as ${existing.email || existing.userId}`);
+                            console.log('');
+                            console.log('  Run `os cloud logout` to switch accounts, or use --force to re-authenticate.');
+                            console.log('');
+                        }
+                        return;
+                    }
+                }
+                catch {
+                    // No stored credentials — proceed
+                }
+            }
+            const url = flags.url.replace(/\/+$/, '');
+            if (!flags.json) {
+                printHeader('ObjectStack Cloud Login');
+                printKV('Server', url);
+                console.log('');
+            }
+            const result = flags.email && flags.password
+                ? await loginWithPassword(url, flags.email, flags.password)
+                : process.stdin.isTTY && !flags.email && !flags.password
+                    ? await loginWithBrowser(url, { noBrowser: flags['no-browser'], silent: flags.json })
+                    : await this.fallbackPasswordPrompt(url, flags.email);
+            await writeCloudConfig({
+                url,
+                token: result.token,
+                email: result.user?.email,
+                userId: result.user?.id,
+                createdAt: new Date().toISOString(),
+            });
+            if (flags.json) {
+                console.log(JSON.stringify({ success: true, email: result.user?.email, userId: result.user?.id, url }, null, 2));
+            }
+            else {
+                printSuccess('Cloud authentication successful');
+                if (result.user?.email)
+                    printKV('Email', result.user.email);
+                if (result.user?.id)
+                    printKV('User ID', result.user.id);
+                console.log('');
+                console.log('  Credentials stored in ~/.objectstack/cloud.json');
+                console.log('  Next: `os package publish` to push a package, `os cloud whoami` to verify.');
+                console.log('');
+            }
+        }
+        catch (error) {
+            if (flags.json) {
+                console.log(JSON.stringify({ success: false, error: error.message }, null, 2));
+                this.exit(1);
+            }
+            printError(error.message || String(error));
+            this.exit(1);
+        }
+    }
+    async fallbackPasswordPrompt(url, providedEmail) {
+        const rl = readline.createInterface({ input, output });
+        const email = providedEmail ?? (await rl.question('Email: '));
+        rl.close();
+        const password = await promptPassword('Password: ');
+        if (!email || !password)
+            throw new Error('Email and password are required');
+        return loginWithPassword(url, email, password);
+    }
+}
+//# sourceMappingURL=login.js.map

package/dist/commands/cloud/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../../src/commands/cloud/login.ts"],"names":[],"mappings":"AAAA,yEAAyE;AAEzE;;;;;;;;GAQG;AAEH,OAAO,KAAK,QAAQ,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,KAAK,IAAI,KAAK,EAAE,MAAM,IAAI,MAAM,EAAE,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAEnG,KAAK,UAAU,cAAc,CAAC,UAAkB;IAC9C,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC7C,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACjC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QACvB,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAChC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAE;YAC/B,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,QAAQ;oBACX,OAAO,EAAE,CAAC;oBACV,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;oBACpC,MAAM;gBACR,KAAK,IAAI,CAAC;gBACV,KAAK,IAAI;oBACP,OAAO,EAAE,CAAC;oBACV,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;oBACxB,MAAM;gBACR,KAAK,QAAQ;oBACX,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACrB,KAAK,CAAC,GAAG,EAAE,CAAC;wBACZ,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;wBAC5B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;wBAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;oBAC9D,CAAC;oBACD,MAAM;gBACR;oBACE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC,CAAC;QACF,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,OAAO;IAC7C,MAAM,CAAU,WAAW,GACzB,wHAAwH,CAAC;IAE3H,MAAM,CAAU,QAAQ,GAAG;QACzB,kBAAkB;QAClB,wDAAwD;QACxD,+BAA+B;QAC/B,+DAA+D;KAChE,CAAC;IAEF,MAAM,CAAU,KAAK,GAAG;QACtB,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC;YAChB,IAAI,EAAE,GAAG;YACT,WAAW,EAAE,iEAAiE;YAC9E,OAAO,EAAE,iBAAiB;YAC1B,GAAG,EAAE,cAAc;SACpB,CAAC;QACF,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,oCAAoC,EAAE,CAAC;QACrF,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,+BAA+B,EAAE,CAAC;QACnF,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC;YAC1B,WAAW,EAAE,sDAAsD;YACnE,OAAO,EAAE,KAAK;SACf,CAAC;QACF,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;YACnB,IAAI,EAAE,GAAG;YACT,WAAW,EAAE,yDAAyD;YACtE,OAAO,EAAE,KAAK;SACf,CAAC;QACF,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;KACvD,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAE/C,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACjB,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,eAAe,EAAE,CAAC;oBACzC,IAAI,QAAQ,EAAE,KAAK,EAAE,CAAC;wBACpB,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;4BACf,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CACzG,CAAC;wBACJ,CAAC;6BAAM,CAAC;4BACN,YAAY,CAAC,wBAAwB,QAAQ,CAAC,GAAG,OAAO,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;4BAC7F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;4BAChB,OAAO,CAAC,GAAG,CAAC,gFAAgF,CAAC,CAAC;4BAC9F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;wBAClB,CAAC;wBACD,OAAO;oBACT,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,kCAAkC;gBACpC,CAAC;YACH,CAAC;YAED,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAE1C,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBAChB,WAAW,CAAC,yBAAyB,CAAC,CAAC;gBACvC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;gBACvB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClB,CAAC;YAED,MAAM,MAAM,GACV,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ;gBAC3B,CAAC,CAAC,MAAM,iBAAiB,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC;gBAC3D,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ;oBACxD,CAAC,CAAC,MAAM,gBAAgB,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;oBACrF,CAAC,CAAC,MAAM,IAAI,CAAC,sBAAsB,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YAE1D,MAAM,gBAAgB,CAAC;gBACrB,GAAG;gBACH,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK;gBACzB,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE;gBACvB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC,CAAC;YAEH,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACnH,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,iCAAiC,CAAC,CAAC;gBAChD,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK;oBAAE,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC5D,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE;oBAAE,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACxD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAChB,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;gBACjE,OAAO,CAAC,GAAG,CAAC,8EAA8E,CAAC,CAAC;gBAC5F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC/E,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACf,CAAC;YACD,UAAU,CAAC,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAAC,GAAW,EAAE,aAAsB;QACtE,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,aAAa,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;QAC9D,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,YAAY,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAC5E,OAAO,iBAAiB,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACjD,CAAC"}

package/dist/commands/cloud/logout.d.ts

@@ -0,0 +1,15 @@
+/**
+ * `objectstack cloud logout` — clear cloud credentials from
+ * ~/.objectstack/cloud.json (and best-effort revoke the session on the
+ * cloud control plane).
+ */
+import { Command } from '@oclif/core';
+export default class CloudLogout extends Command {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=logout.d.ts.map

package/dist/commands/cloud/logout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logout.d.ts","sourceRoot":"","sources":["../../../src/commands/cloud/logout.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAS,MAAM,aAAa,CAAC;AAK7C,MAAM,CAAC,OAAO,OAAO,WAAY,SAAQ,OAAO;IAC9C,OAAgB,WAAW,SAAgD;IAE3E,OAAgB,QAAQ,WAAyB;IAEjD,OAAgB,KAAK;;MAEnB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAiC3B"}

package/dist/commands/cloud/logout.js

@@ -0,0 +1,51 @@
+// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.
+/**
+ * `objectstack cloud logout` — clear cloud credentials from
+ * ~/.objectstack/cloud.json (and best-effort revoke the session on the
+ * cloud control plane).
+ */
+import { Command, Flags } from '@oclif/core';
+import { ObjectStackClient } from '@objectstack/client';
+import { printHeader, printSuccess, printError } from '../../utils/format.js';
+import { deleteCloudConfig, tryReadCloudConfig } from '../../utils/cloud-config.js';
+export default class CloudLogout extends Command {
+    static description = 'Clear stored ObjectStack Cloud credentials';
+    static examples = ['$ os cloud logout'];
+    static flags = {
+        json: Flags.boolean({ description: 'Output as JSON' }),
+    };
+    async run() {
+        const { flags } = await this.parse(CloudLogout);
+        try {
+            if (!flags.json)
+                printHeader('ObjectStack Cloud Logout');
+            const config = await tryReadCloudConfig();
+            if (config?.token && config?.url) {
+                try {
+                    const client = new ObjectStackClient({ baseUrl: config.url, token: config.token });
+                    await client.auth.logout();
+                }
+                catch {
+                    // Best-effort
+                }
+            }
+            await deleteCloudConfig();
+            if (flags.json) {
+                console.log(JSON.stringify({ success: true, message: 'Cloud credentials cleared' }, null, 2));
+            }
+            else {
+                printSuccess('Cloud credentials cleared');
+                console.log('');
+            }
+        }
+        catch (error) {
+            if (flags.json) {
+                console.log(JSON.stringify({ success: false, error: error.message }, null, 2));
+                this.exit(1);
+            }
+            printError(error.message || String(error));
+            this.exit(1);
+        }
+    }
+}
+//# sourceMappingURL=logout.js.map

package/dist/commands/cloud/logout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logout.js","sourceRoot":"","sources":["../../../src/commands/cloud/logout.ts"],"names":[],"mappings":"AAAA,yEAAyE;AAEzE;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEpF,MAAM,CAAC,OAAO,OAAO,WAAY,SAAQ,OAAO;IAC9C,MAAM,CAAU,WAAW,GAAG,4CAA4C,CAAC;IAE3E,MAAM,CAAU,QAAQ,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAEjD,MAAM,CAAU,KAAK,GAAG;QACtB,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;KACvD,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAEhD,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,IAAI;gBAAE,WAAW,CAAC,0BAA0B,CAAC,CAAC;YAEzD,MAAM,MAAM,GAAG,MAAM,kBAAkB,EAAE,CAAC;YAC1C,IAAI,MAAM,EAAE,KAAK,IAAI,MAAM,EAAE,GAAG,EAAE,CAAC;gBACjC,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,iBAAiB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;oBACnF,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC7B,CAAC;gBAAC,MAAM,CAAC;oBACP,cAAc;gBAChB,CAAC;YACH,CAAC;YAED,MAAM,iBAAiB,EAAE,CAAC;YAE1B,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,2BAA2B,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAChG,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,2BAA2B,CAAC,CAAC;gBAC1C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC/E,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACf,CAAC;YACD,UAAU,CAAC,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,CAAC;IACH,CAAC"}

package/dist/commands/cloud/whoami.d.ts

@@ -0,0 +1,15 @@
+/**
+ * `objectstack cloud whoami` — display the active ObjectStack Cloud
+ * identity (read from ~/.objectstack/cloud.json) and verify the token
+ * with a /get-session call against the cloud control plane.
+ */
+import { Command } from '@oclif/core';
+export default class CloudWhoami extends Command {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=whoami.d.ts.map

package/dist/commands/cloud/whoami.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whoami.d.ts","sourceRoot":"","sources":["../../../src/commands/cloud/whoami.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAS,MAAM,aAAa,CAAC;AAI7C,MAAM,CAAC,OAAO,OAAO,WAAY,SAAQ,OAAO;IAC9C,OAAgB,WAAW,SAAgD;IAE3E,OAAgB,QAAQ,WAAyB;IAEjD,OAAgB,KAAK;;MAEnB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CA2D3B"}

package/dist/commands/cloud/whoami.js

@@ -0,0 +1,81 @@
+// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.
+/**
+ * `objectstack cloud whoami` — display the active ObjectStack Cloud
+ * identity (read from ~/.objectstack/cloud.json) and verify the token
+ * with a /get-session call against the cloud control plane.
+ */
+import { Command, Flags } from '@oclif/core';
+import { printHeader, printKV, printSuccess, printError } from '../../utils/format.js';
+import { tryReadCloudConfig } from '../../utils/cloud-config.js';
+export default class CloudWhoami extends Command {
+    static description = 'Show the active ObjectStack Cloud identity';
+    static examples = ['$ os cloud whoami'];
+    static flags = {
+        json: Flags.boolean({ description: 'Output as JSON' }),
+    };
+    async run() {
+        const { flags } = await this.parse(CloudWhoami);
+        try {
+            const config = await tryReadCloudConfig();
+            if (!config?.token) {
+                if (flags.json) {
+                    console.log(JSON.stringify({ logged_in: false }, null, 2));
+                }
+                else {
+                    printError('Not logged in to ObjectStack Cloud. Run `os cloud login` first.');
+                }
+                this.exit(1);
+                return;
+            }
+            // Verify token with /get-session
+            let sessionUser;
+            try {
+                const res = await globalThis.fetch(`${config.url}/api/v1/auth/get-session`, {
+                    headers: { Authorization: `Bearer ${config.token}` },
+                });
+                if (res.ok) {
+                    const data = (await res.json());
+                    const u = data?.user ?? data?.data?.user;
+                    if (u)
+                        sessionUser = { id: u.id, email: u.email };
+                }
+            }
+            catch {
+                // Network failure — fall through to local-only view
+            }
+            const email = sessionUser?.email ?? config.email;
+            const userId = sessionUser?.id ?? config.userId;
+            const valid = !!sessionUser;
+            if (flags.json) {
+                console.log(JSON.stringify({ logged_in: true, valid, url: config.url, email, userId }, null, 2));
+            }
+            else {
+                printHeader('ObjectStack Cloud Identity');
+                printKV('Server', config.url);
+                if (email)
+                    printKV('Email', email);
+                if (userId)
+                    printKV('User ID', userId);
+                if (config.activeOrgId)
+                    printKV('Org', config.activeOrgId);
+                console.log('');
+                if (valid) {
+                    printSuccess('Session valid');
+                }
+                else {
+                    printError('Could not verify session with cloud. Token may be expired — try `os cloud login --force`.');
+                }
+                console.log('');
+            }
+        }
+        catch (error) {
+            if (flags.json) {
+                console.log(JSON.stringify({ success: false, error: error.message }, null, 2));
+                this.exit(1);
+            }
+            printError(error.message || String(error));
+            this.exit(1);
+        }
+    }
+}
+//# sourceMappingURL=whoami.js.map

package/dist/commands/cloud/whoami.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"whoami.js","sourceRoot":"","sources":["../../../src/commands/cloud/whoami.ts"],"names":[],"mappings":"AAAA,yEAAyE;AAEzE;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEjE,MAAM,CAAC,OAAO,OAAO,WAAY,SAAQ,OAAO;IAC9C,MAAM,CAAU,WAAW,GAAG,4CAA4C,CAAC;IAE3E,MAAM,CAAU,QAAQ,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAEjD,MAAM,CAAU,KAAK,GAAG;QACtB,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;KACvD,CAAC;IAEF,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAEhD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,EAAE,CAAC;YAC1C,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;gBACnB,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;oBACf,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC7D,CAAC;qBAAM,CAAC;oBACN,UAAU,CAAC,iEAAiE,CAAC,CAAC;gBAChF,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACb,OAAO;YACT,CAAC;YAED,iCAAiC;YACjC,IAAI,WAAwD,CAAC;YAC7D,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,GAAG,0BAA0B,EAAE;oBAC1E,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,KAAK,EAAE,EAAE;iBACrD,CAAC,CAAC;gBACH,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;oBACX,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAC;oBACvC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC;oBACzC,IAAI,CAAC;wBAAE,WAAW,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;gBACpD,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,oDAAoD;YACtD,CAAC;YAED,MAAM,KAAK,GAAG,WAAW,EAAE,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC;YACjD,MAAM,MAAM,GAAG,WAAW,EAAE,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC;YAChD,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,CAAC;YAE5B,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACnG,CAAC;iBAAM,CAAC;gBACN,WAAW,CAAC,4BAA4B,CAAC,CAAC;gBAC1C,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC9B,IAAI,KAAK;oBAAE,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBACnC,IAAI,MAAM;oBAAE,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;gBACvC,IAAI,MAAM,CAAC,WAAW;oBAAE,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;gBAC3D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAChB,IAAI,KAAK,EAAE,CAAC;oBACV,YAAY,CAAC,eAAe,CAAC,CAAC;gBAChC,CAAC;qBAAM,CAAC;oBACN,UAAU,CAAC,2FAA2F,CAAC,CAAC;gBAC1G,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC/E,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACf,CAAC;YACD,UAAU,CAAC,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,CAAC;IACH,CAAC"}

package/dist/commands/compile.d.ts

@@ -7,6 +7,9 @@ export default class Compile extends Command {
     static flags: {
         output: import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
         json: import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        'strict-body': import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        'runtime-bundle': import("@oclif/core/interfaces").BooleanFlag<boolean>;
+        'no-runtime-bundle': import("@oclif/core/interfaces").BooleanFlag<boolean>;
     };
     run(): Promise<void>;
 }

package/dist/commands/compile.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"compile.d.ts","sourceRoot":"","sources":["../../src/commands/compile.ts"],"names":[],"mappings":"AAEA,OAAO,EAAQ,OAAO,EAAS,MAAM,aAAa,CAAC;AAmBnD,MAAM,CAAC,OAAO,OAAO,OAAQ,SAAQ,OAAO;IAC1C,OAAgB,WAAW,SAAwD;IAEnF,OAAgB,IAAI;;MAElB;IAEF,OAAgB,KAAK;;;MAGnB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAgF3B"}
+{"version":3,"file":"compile.d.ts","sourceRoot":"","sources":["../../src/commands/compile.ts"],"names":[],"mappings":"AAEA,OAAO,EAAQ,OAAO,EAAS,MAAM,aAAa,CAAC;AAqBnD,MAAM,CAAC,OAAO,OAAO,OAAQ,SAAQ,OAAO;IAC1C,OAAgB,WAAW,SAAwD;IAEnF,OAAgB,IAAI;;MAElB;IAEF,OAAgB,KAAK;;;;;;MAoBnB;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CA2L3B"}