@oranix/quiver-cli 0.1.0

package/README.md

@@ -0,0 +1,62 @@
+# @oranix/quiver-cli
+
+Quiver CLI — manage apps, builds, releases from the terminal.
+
+Status: **alpha** (P3.4.1 / P3.4.2). See `docs/cli-reference.md` for the
+planned command taxonomy; v1 ships `login`, `logout`, `whoami`, `apps list/get`,
+and `builds list/get`. Other commands listed in the reference land
+incrementally as backend endpoints become available.
+
+## Install
+
+```bash
+# From the repo root (after `pnpm install` at the top level):
+pnpm --filter @oranix/quiver-cli build
+pnpm --filter @oranix/quiver-cli start -- whoami
+
+# Or, once published to npm:
+npm install -g @oranix/quiver-cli
+quiver --help
+```
+
+## Quickstart
+
+```bash
+# 1. Log in. The CLI prints a URL you must open in a browser.
+quiver login
+
+# 2. Verify who you are.
+quiver whoami
+
+# 3. List your apps.
+quiver apps list
+
+# 4. List builds for an app (by slug or id).
+quiver builds list myapp-android
+```
+
+## CI mode
+
+```bash
+export QUIVER_API=https://quiver-worker.artin.workers.dev
+export QUIVER_SESSION_COOKIE=...   # paste from browser DevTools
+quiver whoami
+quiver builds list myapp-android
+```
+
+## How auth works (v1)
+
+Raft OAuth today only supports the browser-redirect flow with HttpOnly
+cookies. The CLI can't intercept the redirect, so `quiver login` asks
+you to:
+
+1. Open the printed URL in any browser.
+2. Sign in with Raft.
+3. Copy the `quiver_session` cookie value from DevTools.
+4. Paste it back into the CLI.
+
+The token is saved to `$XDG_CONFIG_HOME/quiver/auth.json` (mode 0600).
+For CI, pass it via `QUIVER_SESSION_COOKIE` instead.
+
+v2 will swap this for a true headless flow (Raft Device Flow or a
+`--token-stdin` service-user mode). See `publish-tasks.md` P3.4.x.

package/dist/commands/apps.d.ts

@@ -0,0 +1,7 @@
+/**
+ * `quiver apps` — list / inspect apps in the caller's org.
+ *
+ * Wires GET /api/apps + GET /api/apps/:appId.
+ */
+import type { Command } from "commander";
+export declare function registerAppCommands(program: Command): void;

package/dist/commands/apps.js

@@ -0,0 +1,71 @@
+/**
+ * `quiver apps` — list / inspect apps in the caller's org.
+ *
+ * Wires GET /api/apps + GET /api/apps/:appId.
+ */
+import { apiRequest } from "../lib/api.js";
+export function registerAppCommands(program) {
+    const apps = program.command("apps").description("Manage apps in your org.");
+    apps
+        .command("list")
+        .alias("ls")
+        .description("List apps in the current org.")
+        .option("--include-archived", "Include archived (soft-deleted) apps.", false)
+        .option("--json", "Output JSON.", false)
+        .action(async (opts) => {
+        const res = await apiRequest("/api/apps", {
+            query: { include_archived: opts.includeArchived ? "1" : "0" },
+        });
+        if (opts.json) {
+            console.log(JSON.stringify(res, null, 2));
+            return;
+        }
+        if (res.apps.length === 0) {
+            console.log("No apps. Create one in the admin UI first.");
+            return;
+        }
+        console.log(["SLUG", "PLATFORM", "ARCHIVED", "DEFAULT_CHANNEL", "ID"].join("\t"));
+        for (const a of res.apps) {
+            console.log([
+                a.slug,
+                a.platform,
+                a.archived ? "yes" : "no",
+                a.default_channel_slug ?? "—",
+                a.id.slice(0, 8),
+            ].join("\t"));
+        }
+    });
+    apps
+        .command("get <appIdOrSlug>")
+        .description("Show details for a single app.")
+        .option("--json", "Output JSON.", false)
+        .action(async (appIdOrSlug, opts) => {
+        // The Worker endpoint accepts UUID; for slug we list + filter.
+        // Cheap heuristic: 36-char with dashes = UUID.
+        const isUuid = appIdOrSlug.length === 36 && appIdOrUuidDash(appIdOrSlug);
+        let id = appIdOrSlug;
+        if (!isUuid) {
+            const res = await apiRequest("/api/apps");
+            const match = res.apps.find((a) => a.slug === appIdOrSlug);
+            if (!match) {
+                console.error(`No app with slug '${appIdOrSlug}'.`);
+                process.exit(1);
+            }
+            id = match.id;
+        }
+        const app = await apiRequest(`/api/apps/${id}`);
+        if (opts.json) {
+            console.log(JSON.stringify(app, null, 2));
+            return;
+        }
+        console.log(`${app.name}  (${app.platform})`);
+        console.log(`  id: ${app.id}`);
+        console.log(`  slug: ${app.slug}`);
+        console.log(`  archived: ${app.archived ? "yes" : "no"}`);
+        console.log(`  default_channel: ${app.default_channel_slug ?? "(none)"}`);
+    });
+}
+function appIdOrUuidDash(s) {
+    return s.split("-").length === 5;
+}
+//# sourceMappingURL=apps.js.map

package/dist/commands/apps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apps.js","sourceRoot":"","sources":["../../src/commands/apps.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAY3C,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAC;IAE7E,IAAI;SACD,OAAO,CAAC,MAAM,CAAC;SACf,KAAK,CAAC,IAAI,CAAC;SACX,WAAW,CAAC,+BAA+B,CAAC;SAC5C,MAAM,CAAC,oBAAoB,EAAE,uCAAuC,EAAE,KAAK,CAAC;SAC5E,MAAM,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,CAAC;SACvC,MAAM,CAAC,KAAK,EAAE,IAAmD,EAAE,EAAE;QACpE,MAAM,GAAG,GAAG,MAAM,UAAU,CAAqB,WAAW,EAAE;YAC5D,KAAK,EAAE,EAAE,gBAAgB,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE;SAC9D,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;YAC1D,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,CACT,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACrE,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CACT;gBACE,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;gBACzB,CAAC,CAAC,oBAAoB,IAAI,GAAG;gBAC7B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACjB,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,IAAI;SACD,OAAO,CAAC,mBAAmB,CAAC;SAC5B,WAAW,CAAC,gCAAgC,CAAC;SAC7C,MAAM,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,CAAC;SACvC,MAAM,CAAC,KAAK,EAAE,WAAmB,EAAE,IAAwB,EAAE,EAAE;QAC9D,+DAA+D;QAC/D,+CAA+C;QAC/C,MAAM,MAAM,GACV,WAAW,CAAC,MAAM,KAAK,EAAE,IAAI,eAAe,CAAC,WAAW,CAAC,CAAC;QAC5D,IAAI,EAAE,GAAG,WAAW,CAAC;QACrB,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,MAAM,UAAU,CAAqB,WAAW,CAAC,CAAC;YAC9D,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;YAC3D,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,CAAC,KAAK,CAAC,qBAAqB,WAAW,IAAI,CAAC,CAAC;gBACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;QAChB,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,UAAU,CAAS,aAAa,EAAE,EAAE,CAAC,CAAC;QACxD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CACT,sBAAsB,GAAG,CAAC,oBAAoB,IAAI,QAAQ,EAAE,CAC7D,CAAC;IACJ,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,eAAe,CAAC,CAAS;IAChC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;AACnC,CAAC"}

package/dist/commands/builds.d.ts

@@ -0,0 +1,7 @@
+/**
+ * `quiver builds` — list / inspect builds inside an app.
+ *
+ * Wires GET /api/apps/:appId/builds + GET /api/apps/:appId/builds/:buildId.
+ */
+import type { Command } from "commander";
+export declare function registerBuildCommands(program: Command): void;

package/dist/commands/builds.js

@@ -0,0 +1,231 @@
+/**
+ * `quiver builds` — list / inspect builds inside an app.
+ *
+ * Wires GET /api/apps/:appId/builds + GET /api/apps/:appId/builds/:buildId.
+ */
+import { existsSync, readFileSync } from "node:fs";
+import { apiRequest, apiUploadFile } from "../lib/api.js";
+export function registerBuildCommands(program) {
+    const builds = program
+        .command("builds")
+        .description("Inspect builds inside an app.");
+    builds
+        .command("list <appIdOrSlug>")
+        .alias("ls")
+        .description("List builds for an app.")
+        .option("--limit <n>", "Max rows (default 50)", "50")
+        .option("--json", "Output JSON.", false)
+        .action(async (appIdOrSlug, opts) => {
+        const id = await resolveAppId(appIdOrSlug);
+        const res = await apiRequest(`/api/apps/${id}/builds`, { query: { limit: opts.limit } });
+        if (opts.json) {
+            console.log(JSON.stringify(res, null, 2));
+            return;
+        }
+        if (res.builds.length === 0) {
+            console.log("No builds yet.");
+            return;
+        }
+        for (const b of res.builds) {
+            const flag = b.should_force_update ? "  [force]" : "";
+            console.log(`${b.version_name} (${b.version_code})  ${b.product_type}/${b.release_type}  status=${b.status}${flag}  id=${b.id.slice(0, 8)}`);
+        }
+    });
+    builds
+        .command("get <appIdOrSlug> <buildId>")
+        .description("Show details for a single build.")
+        .option("--json", "Output JSON.", false)
+        .action(async (appIdOrSlug, buildId, opts) => {
+        const id = await resolveAppId(appIdOrSlug);
+        const build = await apiRequest(`/api/apps/${id}/builds/${buildId}`);
+        if (opts.json) {
+            console.log(JSON.stringify(build, null, 2));
+            return;
+        }
+        console.log(`${build.version_name} (${build.version_code})`);
+        console.log(`  product_type: ${build.product_type}`);
+        console.log(`  release_type: ${build.release_type}`);
+        console.log(`  status: ${build.status}`);
+        console.log(`  should_force_update: ${build.should_force_update ? "yes" : "no"}`);
+        console.log(`  created_at: ${new Date(build.created_at).toISOString()}`);
+        if (build.completed_at) {
+            console.log(`  completed_at: ${new Date(build.completed_at).toISOString()}`);
+        }
+        if (build.changelog) {
+            console.log(`\n  changelog:\n${build.changelog.split("\n").map((l) => "    " + l).join("\n")}`);
+        }
+    });
+    builds
+        .command("publish-android <appIdOrSlug>")
+        .description("Create an Android build/release and upload APK plus support artifacts.")
+        .requiredOption("--apk <path>", "Installable APK path.")
+        .requiredOption("--version-name <name>", "Android versionName.")
+        .requiredOption("--version-code <code>", "Android versionCode.")
+        .option("--channel <slug>", "Quiver channel slug.", "main")
+        .option("--arch <abi>", "APK ABI/arch metadata.", "arm64-v8a")
+        .option("--release-type <type>", "Release type metadata.", "stable")
+        .option("--product-type <type>", "Product type metadata.", "android-apk")
+        .option("--mapping <path>", "R8/ProGuard mapping.txt support artifact.")
+        .option("--symbols <path>", "Native symbols archive support artifact.")
+        .option("--metadata <path>", "Build metadata JSON support artifact.")
+        .option("--changelog <text>", "Inline changelog.")
+        .option("--changelog-file <path>", "Read changelog from file.")
+        .option("--source-commit <sha>", "Source commit SHA.")
+        .option("--source-branch <branch>", "Source branch.")
+        .option("--build-time <iso>", "Build time. Defaults to now.")
+        .option("--ci-provider <name>", "CI provider name.")
+        .option("--ci-run-id <id>", "CI run id.")
+        .option("--ci-url <url>", "CI run URL.")
+        .option("--force-update", "Mark release as force update.", false)
+        .option("--draft", "Create draft release instead of active.", false)
+        .option("--json", "Output JSON.", false)
+        .action(async (appIdOrSlug, opts) => {
+        const appId = await resolveAppId(appIdOrSlug);
+        const channelId = await resolveChannelId(appId, opts.channel);
+        const versionCode = Number(opts.versionCode);
+        if (!Number.isFinite(versionCode) || versionCode < 0) {
+            throw new Error("--version-code must be a non-negative number");
+        }
+        for (const file of [opts.apk, opts.mapping, opts.symbols, opts.metadata].filter(Boolean)) {
+            if (!existsSync(file))
+                throw new Error(`missing file: ${file}`);
+        }
+        const changelog = opts.changelogFile
+            ? readFileSync(opts.changelogFile, "utf8")
+            : opts.changelog ?? null;
+        const metadataJson = opts.metadata
+            ? JSON.parse(readFileSync(opts.metadata, "utf8"))
+            : {};
+        const provenance = {
+            source_commit: opts.sourceCommit ?? null,
+            source_branch: opts.sourceBranch ?? null,
+            build_time: opts.buildTime ?? new Date().toISOString(),
+            ci_provider: opts.ciProvider ?? null,
+            ci_run_id: opts.ciRunId ?? null,
+            ci_url: opts.ciUrl ?? null,
+        };
+        const build = await apiRequest(`/api/apps/${appId}/builds`, {
+            method: "POST",
+            body: {
+                channel_id: channelId,
+                product_type: opts.productType,
+                release_type: opts.releaseType,
+                version_name: opts.versionName,
+                version_code: versionCode,
+                changelog,
+                source: "cli",
+                status: "succeeded",
+                build_metadata_json: metadataJson,
+                provenance_json: provenance,
+                should_force_update: Boolean(opts.forceUpdate),
+            },
+        });
+        const assets = [];
+        assets.push(await uploadAndRegisterAsset(appId, build.id, opts.apk, {
+            artifact_kind: "installable",
+            platform: "android",
+            arch: opts.arch,
+            filetype: "apk",
+        }));
+        if (opts.mapping) {
+            assets.push(await uploadAndRegisterAsset(appId, build.id, opts.mapping, {
+                artifact_kind: "proguard-mapping",
+                platform: "android",
+                arch: null,
+                filetype: "mapping.txt",
+            }));
+        }
+        if (opts.symbols) {
+            assets.push(await uploadAndRegisterAsset(appId, build.id, opts.symbols, {
+                artifact_kind: "native-symbols",
+                platform: "android",
+                arch: null,
+                filetype: "symbols.zip",
+            }));
+        }
+        if (opts.metadata) {
+            assets.push(await uploadAndRegisterAsset(appId, build.id, opts.metadata, {
+                artifact_kind: "metadata-file",
+                platform: "android",
+                arch: null,
+                filetype: "metadata.json",
+            }));
+        }
+        const release = await apiRequest(`/api/apps/${appId}/releases`, {
+            method: "POST",
+            body: {
+                build_id: build.id,
+                channel_id: channelId,
+                product_type: opts.productType,
+                release_type: opts.releaseType,
+                status: opts.draft ? "draft" : "active",
+                changelog,
+                should_force_update: Boolean(opts.forceUpdate),
+                provenance_json: provenance,
+                scopes: [{ scope_type: "full", scope_value: "all" }],
+            },
+        });
+        const result = {
+            app_id: appId,
+            build_id: build.id,
+            release_id: release.id,
+            channel: opts.channel,
+            version_name: opts.versionName,
+            version_code: versionCode,
+            assets,
+        };
+        if (opts.json) {
+            console.log(JSON.stringify(result, null, 2));
+            return;
+        }
+        console.log(`Published Android release ${opts.versionName} (${versionCode})`);
+        console.log(`  build:   ${build.id}`);
+        console.log(`  release: ${release.id}`);
+        console.log(`  channel: ${opts.channel}`);
+        console.log(`  assets:  ${assets.map((a) => `${a.artifact_kind}:${a.filetype}`).join(", ")}`);
+    });
+}
+async function resolveAppId(slugOrId) {
+    if (slugOrId.length === 36 && slugOrId.split("-").length === 5) {
+        return slugOrId;
+    }
+    const res = await apiRequest("/api/apps");
+    const match = res.apps.find((a) => a.slug === slugOrId);
+    if (!match) {
+        console.error(`No app with slug '${slugOrId}'.`);
+        process.exit(1);
+    }
+    return match.id;
+}
+async function resolveChannelId(appId, channelSlugOrId) {
+    const res = await apiRequest(`/api/apps/${appId}/channels`);
+    const match = res.channels.find((channel) => channel.id === channelSlugOrId || channel.slug === channelSlugOrId);
+    if (!match) {
+        console.error(`No channel '${channelSlugOrId}' for app '${appId}'.`);
+        process.exit(1);
+    }
+    return match.id;
+}
+async function uploadAndRegisterAsset(appId, buildId, filePath, metadata) {
+    const uploaded = await apiUploadFile(`/api/apps/${appId}/upload`, filePath);
+    const asset = await apiRequest(`/api/apps/${appId}/builds/${buildId}/assets`, {
+        method: "POST",
+        body: {
+            ...metadata,
+            r2_key: uploaded.r2_key,
+            file_hash: uploaded.file_hash,
+            size_bytes: uploaded.size_bytes,
+            metadata_json: {
+                original_filename: uploaded.original_filename,
+            },
+        },
+    });
+    return {
+        id: asset.id,
+        artifact_kind: metadata.artifact_kind,
+        filetype: metadata.filetype,
+        file_hash: uploaded.file_hash,
+        size_bytes: uploaded.size_bytes,
+    };
+}
+//# sourceMappingURL=builds.js.map

package/dist/commands/builds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"builds.js","sourceRoot":"","sources":["../../src/commands/builds.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AA8B1D,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,MAAM,MAAM,GAAG,OAAO;SACnB,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,+BAA+B,CAAC,CAAC;IAEhD,MAAM;SACH,OAAO,CAAC,oBAAoB,CAAC;SAC7B,KAAK,CAAC,IAAI,CAAC;SACX,WAAW,CAAC,yBAAyB,CAAC;SACtC,MAAM,CAAC,aAAa,EAAE,uBAAuB,EAAE,IAAI,CAAC;SACpD,MAAM,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,CAAC;SACvC,MAAM,CACL,KAAK,EACH,WAAmB,EACnB,IAAwC,EACxC,EAAE;QACF,MAAM,EAAE,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,MAAM,UAAU,CAC1B,aAAa,EAAE,SAAS,EACxB,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,CACjC,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAC9B,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,OAAO,CAAC,GAAG,CACT,GAAG,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY,MAAM,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,YAAY,YAAY,CAAC,CAAC,MAAM,GAAG,IAAI,QAAQ,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAChI,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEJ,MAAM;SACH,OAAO,CAAC,6BAA6B,CAAC;SACtC,WAAW,CAAC,kCAAkC,CAAC;SAC/C,MAAM,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,CAAC;SACvC,MAAM,CACL,KAAK,EACH,WAAmB,EACnB,OAAe,EACf,IAAwB,EACxB,EAAE;QACF,MAAM,EAAE,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,MAAM,UAAU,CAAW,aAAa,EAAE,WAAW,OAAO,EAAE,CAAC,CAAC;QAC9E,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC5C,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAClF,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACzE,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CACT,mBAAmB,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,EAAE,CAChE,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClG,CAAC;IACH,CAAC,CACF,CAAC;IAEJ,MAAM;SACH,OAAO,CAAC,+BAA+B,CAAC;SACxC,WAAW,CAAC,wEAAwE,CAAC;SACrF,cAAc,CAAC,cAAc,EAAE,uBAAuB,CAAC;SACvD,cAAc,CAAC,uBAAuB,EAAE,sBAAsB,CAAC;SAC/D,cAAc,CAAC,uBAAuB,EAAE,sBAAsB,CAAC;SAC/D,MAAM,CAAC,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,CAAC;SAC1D,MAAM,CAAC,cAAc,EAAE,wBAAwB,EAAE,WAAW,CAAC;SAC7D,MAAM,CAAC,uBAAuB,EAAE,wBAAwB,EAAE,QAAQ,CAAC;SACnE,MAAM,CAAC,uBAAuB,EAAE,wBAAwB,EAAE,aAAa,CAAC;SACxE,MAAM,CAAC,kBAAkB,EAAE,2CAA2C,CAAC;SACvE,MAAM,CAAC,kBAAkB,EAAE,0CAA0C,CAAC;SACtE,MAAM,CAAC,mBAAmB,EAAE,uCAAuC,CAAC;SACpE,MAAM,CAAC,oBAAoB,EAAE,mBAAmB,CAAC;SACjD,MAAM,CAAC,yBAAyB,EAAE,2BAA2B,CAAC;SAC9D,MAAM,CAAC,uBAAuB,EAAE,oBAAoB,CAAC;SACrD,MAAM,CAAC,0BAA0B,EAAE,gBAAgB,CAAC;SACpD,MAAM,CAAC,oBAAoB,EAAE,8BAA8B,CAAC;SAC5D,MAAM,CAAC,sBAAsB,EAAE,mBAAmB,CAAC;SACnD,MAAM,CAAC,kBAAkB,EAAE,YAAY,CAAC;SACxC,MAAM,CAAC,gBAAgB,EAAE,aAAa,CAAC;SACvC,MAAM,CAAC,gBAAgB,EAAE,+BAA+B,EAAE,KAAK,CAAC;SAChE,MAAM,CAAC,SAAS,EAAE,yCAAyC,EAAE,KAAK,CAAC;SACnE,MAAM,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,CAAC;SACvC,MAAM,CACL,KAAK,EACH,WAAmB,EACnB,IAsBC,EACD,EAAE;QACF,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9D,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAa,EAAE,CAAC;YACrG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa;YAClC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC;YAC1C,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;QAC3B,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ;YAChC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACjD,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,UAAU,GAAG;YACjB,aAAa,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI;YACxC,aAAa,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI;YACxC,UAAU,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACtD,WAAW,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI;YACpC,SAAS,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;YAC/B,MAAM,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI;SAC3B,CAAC;QAEF,MAAM,KAAK,GAAG,MAAM,UAAU,CAAiB,aAAa,KAAK,SAAS,EAAE;YAC1E,MAAM,EAAE,MAAM;YACd,IAAI,EAAE;gBACJ,UAAU,EAAE,SAAS;gBACrB,YAAY,EAAE,IAAI,CAAC,WAAW;gBAC9B,YAAY,EAAE,IAAI,CAAC,WAAW;gBAC9B,YAAY,EAAE,IAAI,CAAC,WAAW;gBAC9B,YAAY,EAAE,WAAW;gBACzB,SAAS;gBACT,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,WAAW;gBACnB,mBAAmB,EAAE,YAAY;gBACjC,eAAe,EAAE,UAAU;gBAC3B,mBAAmB,EAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC;aAC/C;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,EAAE,CAAC;QAClB,MAAM,CAAC,IAAI,CACT,MAAM,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;YACtD,aAAa,EAAE,aAAa;YAC5B,QAAQ,EAAE,SAAS;YACnB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,KAAK;SAChB,CAAC,CACH,CAAC;QACF,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CACT,MAAM,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE;gBAC1D,aAAa,EAAE,kBAAkB;gBACjC,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,IAAI;gBACV,QAAQ,EAAE,aAAa;aACxB,CAAC,CACH,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CACT,MAAM,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE;gBAC1D,aAAa,EAAE,gBAAgB;gBAC/B,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,IAAI;gBACV,QAAQ,EAAE,aAAa;aACxB,CAAC,CACH,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CACT,MAAM,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,EAAE;gBAC3D,aAAa,EAAE,eAAe;gBAC9B,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,IAAI;gBACV,QAAQ,EAAE,eAAe;aAC1B,CAAC,CACH,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,UAAU,CAAiB,aAAa,KAAK,WAAW,EAAE;YAC9E,MAAM,EAAE,MAAM;YACd,IAAI,EAAE;gBACJ,QAAQ,EAAE,KAAK,CAAC,EAAE;gBAClB,UAAU,EAAE,SAAS;gBACrB,YAAY,EAAE,IAAI,CAAC,WAAW;gBAC9B,YAAY,EAAE,IAAI,CAAC,WAAW;gBAC9B,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;gBACvC,SAAS;gBACT,mBAAmB,EAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC;gBAC9C,eAAe,EAAE,UAAU;gBAC3B,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;aACrD;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG;YACb,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,KAAK,CAAC,EAAE;YAClB,UAAU,EAAE,OAAO,CAAC,EAAE;YACtB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,YAAY,EAAE,IAAI,CAAC,WAAW;YAC9B,YAAY,EAAE,WAAW;YACzB,MAAM;SACP,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,6BAA6B,IAAI,CAAC,WAAW,KAAK,WAAW,GAAG,CAAC,CAAC;QAC9E,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,cAAc,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChG,CAAC,CACF,CAAC;AACN,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,QAAgB;IAC1C,IAAI,QAAQ,CAAC,MAAM,KAAK,EAAE,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/D,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,UAAU,CAEzB,WAAW,CAAC,CAAC;IAChB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,qBAAqB,QAAQ,IAAI,CAAC,CAAC;QACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,CAAC,EAAE,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,KAAa,EAAE,eAAuB;IACpE,MAAM,GAAG,GAAG,MAAM,UAAU,CAA6B,aAAa,KAAK,WAAW,CAAC,CAAC;IACxF,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,eAAe,IAAI,OAAO,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC;IACjH,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,eAAe,eAAe,cAAc,KAAK,IAAI,CAAC,CAAC;QACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,CAAC,EAAE,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,KAAa,EACb,OAAe,EACf,QAAgB,EAChB,QAKC;IAQD,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAiB,aAAa,KAAK,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC5F,MAAM,KAAK,GAAG,MAAM,UAAU,CAAiB,aAAa,KAAK,WAAW,OAAO,SAAS,EAAE;QAC5F,MAAM,EAAE,MAAM;QACd,IAAI,EAAE;YACJ,GAAG,QAAQ;YACX,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,aAAa,EAAE;gBACb,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;aAC9C;SACF;KACF,CAAC,CAAC;IACH,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,UAAU,EAAE,QAAQ,CAAC,UAAU;KAChC,CAAC;AACJ,CAAC"}

package/dist/commands/login.d.ts

@@ -0,0 +1,22 @@
+/**
+ * `quiver login` — authenticate the CLI.
+ *
+ * v1 flow (browser-required):
+ *   1. CLI prints a URL: https://quiver-worker.../api/auth/login?return_to=...
+ *   2. User opens the URL in any browser, signs in with Raft OAuth.
+ *   3. After login the Worker redirects to /login/raft/callback which is the
+ *      admin SPA — at this point the user has a HttpOnly `quiver_session`
+ *      cookie in their browser for the Worker's origin.
+ *   4. User opens DevTools → Application → Cookies → copies the cookie value.
+ *   5. User runs `quiver login --token <cookie>` (or pastes when prompted).
+ *
+ * CI mode: `QUIVER_SESSION_COOKIE=... quiver whoami` — env var is read
+ * directly, no file storage.
+ *
+ * Why not OAuth Device Flow or PKCE? Raft OAuth today only supports the
+ * browser redirect flow with HttpOnly cookies; the CLI can't intercept
+ * the callback. Headless flow is a v2 (TBD: Raft Device Flow support or
+ * dev-token bypass for service users).
+ */
+import type { Command } from "commander";
+export declare function registerLoginCommands(program: Command): void;

package/dist/commands/login.js

@@ -0,0 +1,129 @@
+/**
+ * `quiver login` — authenticate the CLI.
+ *
+ * v1 flow (browser-required):
+ *   1. CLI prints a URL: https://quiver-worker.../api/auth/login?return_to=...
+ *   2. User opens the URL in any browser, signs in with Raft OAuth.
+ *   3. After login the Worker redirects to /login/raft/callback which is the
+ *      admin SPA — at this point the user has a HttpOnly `quiver_session`
+ *      cookie in their browser for the Worker's origin.
+ *   4. User opens DevTools → Application → Cookies → copies the cookie value.
+ *   5. User runs `quiver login --token <cookie>` (or pastes when prompted).
+ *
+ * CI mode: `QUIVER_SESSION_COOKIE=... quiver whoami` — env var is read
+ * directly, no file storage.
+ *
+ * Why not OAuth Device Flow or PKCE? Raft OAuth today only supports the
+ * browser redirect flow with HttpOnly cookies; the CLI can't intercept
+ * the callback. Headless flow is a v2 (TBD: Raft Device Flow support or
+ * dev-token bypass for service users).
+ */
+import { createInterface } from "node:readline/promises";
+import { stdin, stdout } from "node:process";
+import { apiRequest, getApiBase, QuiverApiError } from "../lib/api.js";
+import { saveConfig, getConfig } from "../lib/config.js";
+async function promptSecret(message) {
+    // Use a raw-mode readline so we can mask input with '*'.
+    const rl = createInterface({ input: stdin, output: stdout, terminal: true });
+    process.stdout.write(message);
+    return new Promise((resolve, reject) => {
+        let input = "";
+        const onData = (chunk) => {
+            const ch = chunk.toString();
+            if (ch === "\n" || ch === "\r" || ch === "\u0004") {
+                process.stdin.removeListener("data", onData);
+                process.stdout.write("\n");
+                rl.close();
+                resolve(input);
+            }
+            else if (ch === "\u0003") {
+                // Ctrl+C
+                process.stdout.write("\n");
+                rl.close();
+                reject(new Error("cancelled"));
+            }
+            else if (ch === "\u007f" || ch === "\b") {
+                // Backspace
+                if (input.length > 0) {
+                    input = input.slice(0, -1);
+                    process.stdout.write("\b \b");
+                }
+            }
+            else {
+                input += ch;
+                process.stdout.write("*");
+            }
+        };
+        process.stdin.on("data", onData);
+    });
+}
+export function registerLoginCommands(program) {
+    const cmd = program
+        .command("login")
+        .description("Authenticate the CLI against the Quiver Worker.")
+        .option("--token <cookie>", "Paste the quiver_session cookie value (from your browser's DevTools).")
+        .option("--api <url>", "Override the Quiver Worker base URL for this login only.")
+        .option("--print-url", "Just print the login URL; don't prompt for a token.", false)
+        .action(async (opts) => {
+        const apiBase = opts.api ?? getApiBase();
+        const loginUrl = `${apiBase}/api/auth/login?return_to=${encodeURIComponent("/cli/callback")}`;
+        if (opts.printUrl) {
+            console.log(loginUrl);
+            return;
+        }
+        console.log("To authenticate the quiver CLI:");
+        console.log("");
+        console.log(`  1. Open this URL in any browser:`);
+        console.log(`     ${loginUrl}`);
+        console.log("");
+        console.log(`  2. Sign in with Raft. You'll land on the admin UI.`);
+        console.log(`  3. Open DevTools → Application → Cookies → copy the value of "quiver_session".`);
+        console.log(`  4. Paste it below.`);
+        console.log("");
+        let token = opts.token;
+        if (!token) {
+            token = await promptSecret("quiver_session cookie value (input is hidden): ");
+            if (token.length < 8) {
+                console.error("Token looks too short (min 8 chars).");
+                process.exit(1);
+            }
+        }
+        // Persist the token + apiBase to config file.
+        saveConfig({ apiBase, sessionCookie: token });
+        console.log(`✔ Saved to ${configDisplayPath()}`);
+        console.log(`  API base: ${apiBase}`);
+        // Verify the token works by calling /api/auth/me.
+        try {
+            await apiRequest("/api/auth/me");
+            console.log(`✔ Token verified — you're logged in.`);
+        }
+        catch (e) {
+            if (e instanceof QuiverApiError && e.status === 401) {
+                console.error(`✘ Token rejected (401). Run \`quiver logout\` and try again.`);
+                process.exit(1);
+            }
+            throw e;
+        }
+    });
+    program
+        .command("logout")
+        .description("Clear the saved session cookie.")
+        .action(() => {
+        const cfg = getConfig();
+        if (!cfg.sessionCookie) {
+            console.log("Not logged in (no saved session cookie).");
+            return;
+        }
+        delete cfg.sessionCookie;
+        saveConfig(cfg);
+        console.log(`✔ Logged out (token cleared from ${configDisplayPath()}).`);
+    });
+}
+function configDisplayPath() {
+    // Mirror getConfig's path resolution for display only.
+    const xdg = process.env.XDG_CONFIG_HOME;
+    const dir = xdg && xdg.length > 0 ? xdg : `${process.env.HOME ?? "~"}/.config`;
+    return `${dir}/quiver/auth.json`;
+}
+// silence "unused import" if user has no cookie in env
+//# sourceMappingURL=login.js.map

package/dist/commands/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAEzD,KAAK,UAAU,YAAY,CAAC,OAAe;IACzC,yDAAyD;IACzD,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,CAAC,KAAsB,EAAE,EAAE;YACxC,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC5B,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;gBAClD,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC3B,EAAE,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,CAAC,KAAK,CAAC,CAAC;YACjB,CAAC;iBAAM,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;gBAC3B,SAAS;gBACT,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC3B,EAAE,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;YACjC,CAAC;iBAAM,IAAI,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;gBAC1C,YAAY;gBACZ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACrB,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;oBAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,KAAK,IAAI,EAAE,CAAC;gBACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC,CAAC;QACF,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,MAAM,GAAG,GAAG,OAAO;SAChB,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,iDAAiD,CAAC;SAC9D,MAAM,CACL,kBAAkB,EAClB,uEAAuE,CACxE;SACA,MAAM,CACL,aAAa,EACb,0DAA0D,CAC3D;SACA,MAAM,CAAC,aAAa,EAAE,qDAAqD,EAAE,KAAK,CAAC;SACnF,MAAM,CACL,KAAK,EAAE,IAIN,EAAE,EAAE;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,IAAI,UAAU,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,GAAG,OAAO,6BAA6B,kBAAkB,CAAC,eAAe,CAAC,EAAE,CAAC;QAE9F,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACtB,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,QAAQ,QAAQ,EAAE,CAAC,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;QACpE,OAAO,CAAC,GAAG,CAAC,kFAAkF,CAAC,CAAC;QAChG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACvB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,MAAM,YAAY,CACxB,iDAAiD,CAClD,CAAC;YACF,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,OAAO,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;gBACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAED,8CAA8C;QAC9C,UAAU,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,cAAc,iBAAiB,EAAE,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,eAAe,OAAO,EAAE,CAAC,CAAC;QAEtC,kDAAkD;QAClD,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,cAAc,CAAC,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,cAAc,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACpD,OAAO,CAAC,KAAK,CACX,8DAA8D,CAC/D,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CACF,CAAC;IAEJ,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,iCAAiC,CAAC;SAC9C,MAAM,CAAC,GAAG,EAAE;QACX,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;QACxB,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;QACD,OAAQ,GAAkC,CAAC,aAAa,CAAC;QACzD,UAAU,CAAC,GAAG,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,oCAAoC,iBAAiB,EAAE,IAAI,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,iBAAiB;IACxB,uDAAuD;IACvD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IACxC,MAAM,GAAG,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,UAAU,CAAC;IAC/E,OAAO,GAAG,GAAG,mBAAmB,CAAC;AACnC,CAAC;AAED,uDAAuD"}

package/dist/commands/whoami.d.ts

@@ -0,0 +1,5 @@
+/**
+ * `quiver whoami` — print the current authenticated account.
+ */
+import type { Command } from "commander";
+export declare function registerWhoamiCommand(program: Command): void;

package/dist/commands/whoami.js

@@ -0,0 +1,43 @@
+/**
+ * `quiver whoami` — print the current authenticated account.
+ */
+import { apiRequest, QuiverApiError, getApiBase } from "../lib/api.js";
+import { resolveSessionCookie } from "../lib/config.js";
+export function registerWhoamiCommand(program) {
+    program
+        .command("whoami")
+        .description("Print the currently authenticated account + roles.")
+        .option("--json", "Output machine-readable JSON.", false)
+        .action(async (opts) => {
+        if (!resolveSessionCookie()) {
+            console.error("Not logged in. Run `quiver login` first.");
+            process.exit(1);
+        }
+        try {
+            const me = await apiRequest("/api/auth/me");
+            if (!me.account) {
+                console.error("Server returned no account info.");
+                process.exit(1);
+            }
+            if (opts.json) {
+                console.log(JSON.stringify(me, null, 2));
+                return;
+            }
+            const a = me.account;
+            console.log(`${a.display_name}  (${a.principal_type})`);
+            console.log(`  server:  ${a.server_slug ?? a.server_id}`);
+            console.log(`  username: @${a.username ?? "(none)"}`);
+            console.log(`  org_id:  ${a.org_id ?? "(none)"}`);
+            console.log(`  org_role: ${a.org_role ?? "(none)"}`);
+            console.log(`  api:     ${getApiBase()}`);
+        }
+        catch (e) {
+            if (e instanceof QuiverApiError && e.status === 401) {
+                console.error("Not authenticated. Run `quiver login` to refresh.");
+                process.exit(1);
+            }
+            throw e;
+        }
+    });
+}
+//# sourceMappingURL=whoami.js.map

package/dist/commands/whoami.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"whoami.js","sourceRoot":"","sources":["../../src/commands/whoami.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAmBxD,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,oDAAoD,CAAC;SACjE,MAAM,CAAC,QAAQ,EAAE,+BAA+B,EAAE,KAAK,CAAC;SACxD,MAAM,CAAC,KAAK,EAAE,IAAwB,EAAE,EAAE;QACzC,IAAI,CAAC,oBAAoB,EAAE,EAAE,CAAC;YAC5B,OAAO,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,UAAU,CAAa,cAAc,CAAC,CAAC;YACxD,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;gBAChB,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;gBAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBACzC,OAAO;YACT,CAAC;YACD,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,YAAY,MAAM,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC;YACxD,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;YAC1D,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,QAAQ,IAAI,QAAQ,EAAE,CAAC,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC,CAAC;YAClD,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,QAAQ,IAAI,QAAQ,EAAE,CAAC,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,cAAc,UAAU,EAAE,EAAE,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,cAAc,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACpD,OAAO,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;gBACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,19 @@
+#!/usr/bin/env node
+/**
+ * quiver CLI — entry point.
+ *
+ * Subcommands are registered via the registry module. This file only
+ * handles top-level commander setup + global flags (--api, --json, --verbose).
+ *
+ * Auth model: the CLI doesn't store long-lived tokens. It uses the same
+ * browser-cookie session as the admin SPA. Two ways to "log in":
+ *   - `quiver login` — prints a URL to visit in any browser; the user
+ *     completes Raft OAuth there, the Worker sets the quiver_session
+ *     cookie, the user copies the cookie value back into the CLI.
+ *   - `quiver login --token <cookie>` — paste an existing session cookie.
+ *
+ * For CI: `quiver login --token "$QUIVER_SESSION_COOKIE"`.
+ *
+ * Token storage: ~/.config/quiver/auth.json (or $XDG_CONFIG_HOME/quiver/auth.json).
+ */
+export {};

package/dist/index.js

@@ -0,0 +1,66 @@
+#!/usr/bin/env node
+/**
+ * quiver CLI — entry point.
+ *
+ * Subcommands are registered via the registry module. This file only
+ * handles top-level commander setup + global flags (--api, --json, --verbose).
+ *
+ * Auth model: the CLI doesn't store long-lived tokens. It uses the same
+ * browser-cookie session as the admin SPA. Two ways to "log in":
+ *   - `quiver login` — prints a URL to visit in any browser; the user
+ *     completes Raft OAuth there, the Worker sets the quiver_session
+ *     cookie, the user copies the cookie value back into the CLI.
+ *   - `quiver login --token <cookie>` — paste an existing session cookie.
+ *
+ * For CI: `quiver login --token "$QUIVER_SESSION_COOKIE"`.
+ *
+ * Token storage: ~/.config/quiver/auth.json (or $XDG_CONFIG_HOME/quiver/auth.json).
+ */
+import { Command } from "commander";
+import { registerAppCommands } from "./commands/apps.js";
+import { registerBuildCommands } from "./commands/builds.js";
+import { registerLoginCommands } from "./commands/login.js";
+import { registerWhoamiCommand } from "./commands/whoami.js";
+import { getConfig } from "./lib/config.js";
+import { setApiBase } from "./lib/api.js";
+const program = new Command();
+program
+    .name("quiver")
+    .description("Quiver CLI — manage apps, builds, releases from the terminal.")
+    .version("0.1.0")
+    .option("--api <url>", "Quiver Worker base URL (default: https://quiver-worker.artin.workers.dev or $QUIVER_API)")
+    .option("--json", "Output machine-readable JSON (suppresses human output)", false)
+    .option("--verbose", "Print HTTP request details for debugging", false);
+// Re-read global options after parse to wire into the API client.
+program.hook("preAction", (thisCommand) => {
+    const opts = thisCommand.opts();
+    const cfg = getConfig();
+    const apiBase = opts.api ?? process.env.QUIVER_API ?? cfg.apiBase;
+    if (apiBase)
+        setApiBase(apiBase);
+    if (opts.verbose)
+        process.env.QUIVER_VERBOSE = "1";
+});
+// --- Subcommand groups ---
+registerLoginCommands(program);
+registerWhoamiCommand(program);
+registerAppCommands(program);
+registerBuildCommands(program);
+program
+    .command("version")
+    .description("Print quiver CLI version")
+    .action(() => {
+    console.log(program.version());
+});
+program.parseAsync(process.argv).catch((err) => {
+    if (err instanceof Error && err.name === "QuiverApiError") {
+        console.error(`error: ${err.message}`);
+        if (process.env.QUIVER_VERBOSE === "1" && err.stack) {
+            console.error(err.stack);
+        }
+        process.exit(1);
+    }
+    console.error(err instanceof Error ? err.message : String(err));
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,QAAQ,CAAC;KACd,WAAW,CAAC,+DAA+D,CAAC;KAC5E,OAAO,CAAC,OAAO,CAAC;KAChB,MAAM,CACL,aAAa,EACb,0FAA0F,CAC3F;KACA,MAAM,CAAC,QAAQ,EAAE,wDAAwD,EAAE,KAAK,CAAC;KACjF,MAAM,CAAC,WAAW,EAAE,0CAA0C,EAAE,KAAK,CAAC,CAAC;AAE1E,kEAAkE;AAClE,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,EAAE;IACxC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAuD,CAAC;IACrF,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,OAAO,CAAC;IAClE,IAAI,OAAO;QAAE,UAAU,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;AACrD,CAAC,CAAC,CAAC;AAEH,4BAA4B;AAC5B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,mBAAmB,CAAC,OAAO,CAAC,CAAC;AAC7B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAE/B,OAAO;KACJ,OAAO,CAAC,SAAS,CAAC;KAClB,WAAW,CAAC,0BAA0B,CAAC;KACvC,MAAM,CAAC,GAAG,EAAE;IACX,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;AACjC,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IAC7C,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAC1D,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACvC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YACpD,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/lib/api.d.ts

@@ -0,0 +1,25 @@
+/**
+ * HTTP client for the Quiver Worker API.
+ *
+ * Mirrors the shape of admin/src/lib/api.ts but uses a CLI cookie instead
+ * of the browser's `credentials: "include"` mechanism.
+ *
+ * Endpoints called by the CLI use `requireAppRole("viewer")` or
+ * `requireOrgRole("member")` — they accept the HttpOnly session cookie
+ * as long as the user has been logged in via `quiver login`.
+ */
+export declare class QuiverApiError extends Error {
+    readonly status: number;
+    readonly body: unknown;
+    constructor(status: number, body: unknown, message: string);
+}
+export declare function setApiBase(url: string): void;
+export declare function getApiBase(): string;
+export interface ApiRequestOptions {
+    method?: "GET" | "POST" | "PATCH" | "DELETE";
+    body?: unknown;
+    query?: Record<string, string | number | boolean | null | undefined>;
+    raw?: boolean;
+}
+export declare function apiRequest<T = unknown>(path: string, opts?: ApiRequestOptions): Promise<T>;
+export declare function apiUploadFile<T = unknown>(path: string, filePath: string, fieldName?: string): Promise<T>;

package/dist/lib/api.js

@@ -0,0 +1,125 @@
+/**
+ * HTTP client for the Quiver Worker API.
+ *
+ * Mirrors the shape of admin/src/lib/api.ts but uses a CLI cookie instead
+ * of the browser's `credentials: "include"` mechanism.
+ *
+ * Endpoints called by the CLI use `requireAppRole("viewer")` or
+ * `requireOrgRole("member")` — they accept the HttpOnly session cookie
+ * as long as the user has been logged in via `quiver login`.
+ */
+import { resolveApiBase, resolveSessionCookie } from "./config.js";
+import { Blob } from "node:buffer";
+import { readFile } from "node:fs/promises";
+import { basename } from "node:path";
+export class QuiverApiError extends Error {
+    status;
+    body;
+    constructor(status, body, message) {
+        super(message);
+        this.name = "QuiverApiError";
+        this.status = status;
+        this.body = body;
+    }
+}
+let currentApiBase = null;
+export function setApiBase(url) {
+    currentApiBase = url;
+}
+export function getApiBase() {
+    return currentApiBase ?? resolveApiBase();
+}
+export async function apiRequest(path, opts = {}) {
+    const url = new URL(path.startsWith("/") ? path : `/${path}`, getApiBase());
+    if (opts.query) {
+        for (const [k, v] of Object.entries(opts.query)) {
+            if (v === null || v === undefined)
+                continue;
+            url.searchParams.set(k, String(v));
+        }
+    }
+    const headers = {
+        accept: "application/json",
+    };
+    const bearer = process.env.QUIVER_AUTH_TOKEN ?? process.env.QUIVER_BEARER_TOKEN;
+    if (bearer)
+        headers.authorization = `Bearer ${bearer}`;
+    const cookie = resolveSessionCookie();
+    if (!bearer && cookie)
+        headers["cookie"] = cookie;
+    let body;
+    if (opts.body !== undefined) {
+        headers["content-type"] = "application/json";
+        body = JSON.stringify(opts.body);
+    }
+    const res = await fetch(url.toString(), {
+        method: opts.method ?? "GET",
+        headers,
+        ...(body !== undefined ? { body } : {}),
+    });
+    if (process.env.QUIVER_VERBOSE === "1") {
+        console.error(`> ${opts.method ?? "GET"} ${url}`);
+        console.error(`< ${res.status}`);
+    }
+    if (opts.raw)
+        return res;
+    const text = await res.text();
+    let data = text;
+    if (text.length > 0) {
+        try {
+            data = JSON.parse(text);
+        }
+        catch {
+            // keep as text
+        }
+    }
+    if (!res.ok) {
+        const msg = typeof data === "object" && data && "error" in data
+            ? String(data.error)
+            : `${res.status} ${res.statusText}`;
+        throw new QuiverApiError(res.status, data, msg);
+    }
+    return data;
+}
+export async function apiUploadFile(path, filePath, fieldName = "apk") {
+    const url = new URL(path.startsWith("/") ? path : `/${path}`, getApiBase());
+    const cookie = resolveSessionCookie();
+    const form = new FormData();
+    const bytes = await readFile(filePath);
+    form.append(fieldName, new Blob([bytes]), basename(filePath));
+    const headers = {
+        accept: "application/json",
+    };
+    const bearer = process.env.QUIVER_AUTH_TOKEN ?? process.env.QUIVER_BEARER_TOKEN;
+    if (bearer)
+        headers.authorization = `Bearer ${bearer}`;
+    if (!bearer && cookie)
+        headers.cookie = cookie;
+    const res = await fetch(url.toString(), {
+        method: "POST",
+        headers,
+        body: form,
+    });
+    if (process.env.QUIVER_VERBOSE === "1") {
+        console.error(`> POST ${url}`);
+        console.error(`< ${res.status}`);
+    }
+    const text = await res.text();
+    let data = text;
+    if (text.length > 0) {
+        try {
+            data = JSON.parse(text);
+        }
+        catch {
+            // keep as text
+        }
+    }
+    if (!res.ok) {
+        const msg = typeof data === "object" && data && "error" in data
+            ? String(data.error)
+            : `${res.status} ${res.statusText}`;
+        throw new QuiverApiError(res.status, data, msg);
+    }
+    return data;
+}
+//# sourceMappingURL=api.js.map

package/dist/lib/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../src/lib/api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,MAAM,OAAO,cAAe,SAAQ,KAAK;IAC9B,MAAM,CAAS;IACf,IAAI,CAAU;IACvB,YAAY,MAAc,EAAE,IAAa,EAAE,OAAe;QACxD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,IAAI,cAAc,GAAkB,IAAI,CAAC;AAEzC,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,cAAc,GAAG,GAAG,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO,cAAc,IAAI,cAAc,EAAE,CAAC;AAC5C,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAY,EACZ,OAA0B,EAAE;IAE5B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;IAC5E,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;gBAAE,SAAS;YAC5C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAA2B;QACtC,MAAM,EAAE,kBAAkB;KAC3B,CAAC;IACF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAChF,IAAI,MAAM;QAAE,OAAO,CAAC,aAAa,GAAG,UAAU,MAAM,EAAE,CAAC;IACvD,MAAM,MAAM,GAAG,oBAAoB,EAAE,CAAC;IACtC,IAAI,CAAC,MAAM,IAAI,MAAM;QAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC;IAClD,IAAI,IAAwB,CAAC;IAC7B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAC7C,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;QACtC,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,KAAK;QAC5B,OAAO;QACP,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,GAAG,EAAE,CAAC;QACvC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,IAAI,CAAC,GAAG;QAAE,OAAQ,GAAoB,CAAC;IAC3C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,IAAI,GAAY,IAAI,CAAC;IACzB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;IACH,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,GAAG,GACP,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,IAAI,OAAO,IAAI,IAAI;YACjD,CAAC,CAAC,MAAM,CAAE,IAA2B,CAAC,KAAK,CAAC;YAC5C,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QACxC,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,IAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAY,EACZ,QAAgB,EAChB,SAAS,GAAG,KAAK;IAEjB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,oBAAoB,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAE9D,MAAM,OAAO,GAA2B;QACtC,MAAM,EAAE,kBAAkB;KAC3B,CAAC;IACF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAChF,IAAI,MAAM;QAAE,OAAO,CAAC,aAAa,GAAG,UAAU,MAAM,EAAE,CAAC;IACvD,IAAI,CAAC,MAAM,IAAI,MAAM;QAAE,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;IAE/C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;QACtC,MAAM,EAAE,MAAM;QACd,OAAO;QACP,IAAI,EAAE,IAAI;KACX,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,GAAG,EAAE,CAAC;QACvC,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC;QAC/B,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,IAAI,GAAY,IAAI,CAAC;IACzB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;IACH,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,GAAG,GACP,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,IAAI,OAAO,IAAI,IAAI;YACjD,CAAC,CAAC,MAAM,CAAE,IAA2B,CAAC,KAAK,CAAC;YAC5C,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QACxC,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,IAAS,CAAC;AACnB,CAAC"}

package/dist/lib/config.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Config + auth storage for the quiver CLI.
+ *
+ * Resolution order for any setting (first wins):
+ *   1. CLI flag (--api, --token, ...)
+ *   2. Environment variable (QUIVER_API, QUIVER_SESSION_COOKIE, ...)
+ *   3. File at $XDG_CONFIG_HOME/quiver/auth.json (default ~/.config/quiver/auth.json)
+ *
+ * The config file holds:
+ *   - apiBase: the Quiver Worker URL the CLI talks to
+ *   - sessionCookie: the HttpOnly `quiver_session` cookie value the
+ *     Worker set after `quiver login` (or copied from the browser DevTools)
+ */
+export interface CliConfig {
+    apiBase?: string;
+    sessionCookie?: string;
+}
+export declare function getConfig(): CliConfig;
+export declare function saveConfig(patch: Partial<CliConfig>): CliConfig;
+export declare function clearConfig(): void;
+export declare function resolveApiBase(): string;
+export declare function resolveSessionCookie(): string | undefined;

package/dist/lib/config.js

@@ -0,0 +1,70 @@
+/**
+ * Config + auth storage for the quiver CLI.
+ *
+ * Resolution order for any setting (first wins):
+ *   1. CLI flag (--api, --token, ...)
+ *   2. Environment variable (QUIVER_API, QUIVER_SESSION_COOKIE, ...)
+ *   3. File at $XDG_CONFIG_HOME/quiver/auth.json (default ~/.config/quiver/auth.json)
+ *
+ * The config file holds:
+ *   - apiBase: the Quiver Worker URL the CLI talks to
+ *   - sessionCookie: the HttpOnly `quiver_session` cookie value the
+ *     Worker set after `quiver login` (or copied from the browser DevTools)
+ */
+import { mkdirSync, readFileSync, writeFileSync, existsSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { homedir } from "node:os";
+const DEFAULT_API_BASE = "https://quiver-worker.artin.workers.dev";
+function configPath() {
+    const xdg = process.env.XDG_CONFIG_HOME;
+    const dir = xdg && xdg.length > 0 ? xdg : join(homedir(), ".config");
+    return join(dir, "quiver", "auth.json");
+}
+export function getConfig() {
+    const path = configPath();
+    if (!existsSync(path))
+        return {};
+    try {
+        const raw = readFileSync(path, "utf8");
+        const parsed = JSON.parse(raw);
+        return parsed ?? {};
+    }
+    catch {
+        return {};
+    }
+}
+export function saveConfig(patch) {
+    const current = getConfig();
+    const next = { ...current, ...patch };
+    const path = configPath();
+    mkdirSync(dirname(path), { recursive: true });
+    // 0600 — session cookie is sensitive.
+    writeFileSync(path, JSON.stringify(next, null, 2) + "\n", { mode: 0o600 });
+    return next;
+}
+export function clearConfig() {
+    const current = getConfig();
+    const next = { ...current };
+    delete next.sessionCookie;
+    saveConfig(next);
+}
+export function resolveApiBase() {
+    const cliFlag = process.env.QUIVER_CLI_API;
+    if (cliFlag)
+        return cliFlag;
+    const env = process.env.QUIVER_API;
+    if (env)
+        return env;
+    const cfg = getConfig();
+    if (cfg.apiBase)
+        return cfg.apiBase;
+    return DEFAULT_API_BASE;
+}
+export function resolveSessionCookie() {
+    // CI mode wins over file config (env vars are explicit).
+    const env = process.env.QUIVER_SESSION_COOKIE;
+    if (env)
+        return env;
+    return getConfig().sessionCookie;
+}
+//# sourceMappingURL=config.js.map

package/dist/lib/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAOlC,MAAM,gBAAgB,GAAG,yCAAyC,CAAC;AAEnE,SAAS,UAAU;IACjB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IACxC,MAAM,GAAG,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IACrE,OAAO,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAc,CAAC;QAC5C,OAAO,MAAM,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAyB;IAClD,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAc,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC;IACjD,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,sCAAsC;IACtC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAc,EAAE,GAAG,OAAO,EAAE,CAAC;IACvC,OAAO,IAAI,CAAC,aAAa,CAAC;IAC1B,UAAU,CAAC,IAAI,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAC3C,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IACnC,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IACpB,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,IAAI,GAAG,CAAC,OAAO;QAAE,OAAO,GAAG,CAAC,OAAO,CAAC;IACpC,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,yDAAyD;IACzD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IAC9C,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IACpB,OAAO,SAAS,EAAE,CAAC,aAAa,CAAC;AACnC,CAAC"}

package/package.json

@@ -0,0 +1,36 @@
+{
+  "name": "@oranix/quiver-cli",
+  "version": "0.1.0",
+  "description": "Quiver CLI — manage apps, builds, releases from the terminal.",
+  "license": "MIT",
+  "type": "module",
+  "main": "dist/index.js",
+  "bin": {
+    "quiver": "./dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsx watch src/index.ts",
+    "start": "node dist/index.js",
+    "test": "vitest run",
+    "lint": "eslint src/",
+    "lint:fix": "eslint --fix src/"
+  },
+  "dependencies": {
+    "commander": "^12.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.0",
+    "eslint": "^9.17.0",
+    "tsx": "^4.19.2",
+    "typescript": "^5.9.3",
+    "vitest": "^2.1.9"
+  },
+  "engines": {
+    "node": ">=20"
+  }
+}