@picked/cli 0.0.85-next.4 → 0.0.85-next.5

package/dist/workspace-use-CnR5FkxR.js

@@ -0,0 +1,839 @@
+import { generate as e } from "@picked/typegen";
+import { loadPickedConfig as t, loadResolvedPickedConfig as n, normalizeApiUrl as r, readActiveSelection as i, writeActiveSelection as a } from "@picked/config";
+import { createServer as o } from "node:http";
+import { spawn as s } from "node:child_process";
+import { existsSync as c } from "node:fs";
+import { chmod as l, mkdir as u, mkdtemp as d, readFile as f, readdir as p, rename as m, rm as h, rmdir as ee, writeFile as g } from "node:fs/promises";
+import { basename as te, dirname as _, join as v, resolve as y, sep as b } from "node:path";
+import { createHash as x, randomBytes as S } from "node:crypto";
+import { homedir as ne } from "node:os";
+import { AdminApiResponseError as re, AssetCommitDocument as ie, AssetDeleteDocument as ae, AssetUploadInitDocument as oe, ProjectLiveVersionDocument as se, WorkspaceExportDocument as ce, WorkspaceImportDocument as le, WorkspacePublishDocument as ue, createAdminApiClient as C, graphql as w } from "@picked/admin-api-client";
+import { createInterface as de } from "node:readline";
+//#region src/commands/generate-types.ts
+async function T(t) {
+	let r = t?.cwd ?? process.cwd(), i = await n(r);
+	if (!i) return console.error("No picked.config.{ts,js,json} found in the current directory."), 1;
+	try {
+		let n = await e({
+			config: i,
+			check: t?.check ?? !1,
+			onWarn: (e) => {
+				console.warn(e);
+			}
+		});
+		return t?.check ? n.changed ? (console.error(`Types are out of date: ${n.typesOutput}`), 1) : (console.log(`Types are up to date (${n.typesOutput}).`), 0) : (console.log(`Generated types at ${n.typesOutput}`), 0);
+	} catch (e) {
+		let t = e instanceof Error ? e.message : String(e);
+		return console.error(t), 1;
+	}
+}
+//#endregion
+//#region src/lib/browser.ts
+function fe(e) {
+	return process.platform === "darwin" ? {
+		command: "open",
+		args: [e]
+	} : process.platform === "win32" ? {
+		command: "cmd",
+		args: [
+			"/c",
+			"start",
+			"\"\"",
+			e
+		]
+	} : {
+		command: "xdg-open",
+		args: [e]
+	};
+}
+function pe(e) {
+	let { command: t, args: n } = fe(e);
+	try {
+		let e = s(t, n, {
+			detached: !0,
+			stdio: "ignore"
+		});
+		e.on("error", () => void 0), e.unref();
+	} catch {}
+	return Promise.resolve();
+}
+//#endregion
+//#region src/lib/paths.ts
+var me = 8;
+function he() {
+	return v(ne(), ".picked");
+}
+function ge(e) {
+	let t = r(e), { hostname: n, port: i } = new URL(t);
+	return `${(i ? `${n}-${i}` : n).replace(/[^a-z0-9.-]/gi, "_")}-${x("sha256").update(t).digest("hex").slice(0, me)}`;
+}
+function E(e) {
+	return v(he(), "auth", `${ge(e)}.json`);
+}
+//#endregion
+//#region src/auth/token-store.ts
+var D = 384;
+function _e(e) {
+	return typeof e == "object" && !!e && "clientId" in e && typeof e.clientId == "string" && "redirectUri" in e && typeof e.redirectUri == "string";
+}
+function ve(e) {
+	return !(typeof e != "object" || !e || !("accessToken" in e) || typeof e.accessToken != "string" || !("refreshToken" in e) || typeof e.refreshToken != "string" || !("expiresAt" in e) || typeof e.expiresAt != "number" || "user" in e && e.user !== void 0 && (typeof e.user != "object" || e.user === null));
+}
+function ye(e) {
+	return !(typeof e != "object" || !e || !("apiUrl" in e) || typeof e.apiUrl != "string" || "client" in e && e.client !== void 0 && !_e(e.client) || "session" in e && e.session !== void 0 && !ve(e.session));
+}
+async function O(e) {
+	let t = E(e);
+	if (!c(t)) return null;
+	try {
+		let e = JSON.parse(await f(t, "utf8"));
+		return ye(e) ? e : null;
+	} catch {
+		return null;
+	}
+}
+async function be(e) {
+	let t = E(e.apiUrl);
+	await u(_(t), { recursive: !0 });
+	let n = `${t}.${process.pid.toString()}.tmp`;
+	await g(n, `${JSON.stringify(e, null, 2)}\n`, {
+		encoding: "utf8",
+		mode: D
+	}), await l(n, D), await m(n, t);
+}
+async function k(e, t) {
+	let n = await O(e);
+	await be({
+		apiUrl: r(e),
+		client: n?.client,
+		session: n?.session,
+		...t
+	});
+}
+async function xe(e, t) {
+	await k(e, { client: t });
+}
+async function A(e, t) {
+	await k(e, { session: t });
+}
+async function Se(e) {
+	await h(E(e), { force: !0 });
+}
+//#endregion
+//#region src/auth/pkce.ts
+var Ce = 32, we = 16;
+function j(e) {
+	return e.toString("base64").replaceAll("+", "-").replaceAll("/", "_").replaceAll("=", "");
+}
+function Te() {
+	return j(S(Ce));
+}
+function Ee(e) {
+	return j(x("sha256").update(e).digest());
+}
+function De() {
+	return j(S(we));
+}
+//#endregion
+//#region src/auth/oauth.ts
+var M = [
+	8976,
+	8977,
+	8988
+], Oe = 18e4, ke = "openid profile email";
+async function N(e) {
+	let t;
+	try {
+		t = await fetch(`${e}/.well-known/oauth-authorization-server`);
+	} catch (e) {
+		let t = e instanceof Error ? e.message : String(e);
+		throw Error(`Failed to reach the Picked OAuth discovery endpoint: ${t}`);
+	}
+	if (!t.ok) throw Error(`OAuth discovery request failed (${t.status.toString()}).`);
+	let n = await t.json();
+	if (typeof n != "object" || !n) throw Error("Malformed OAuth discovery document.");
+	if (!("authorization_endpoint" in n) || typeof n.authorization_endpoint != "string") throw Error("OAuth discovery document is missing authorization_endpoint.");
+	if (!("token_endpoint" in n) || typeof n.token_endpoint != "string") throw Error("OAuth discovery document is missing token_endpoint.");
+	let r = "registration_endpoint" in n && typeof n.registration_endpoint == "string" ? n.registration_endpoint : void 0, i = "code_challenge_methods_supported" in n && Array.isArray(n.code_challenge_methods_supported) ? n.code_challenge_methods_supported.filter((e) => typeof e == "string") : void 0;
+	return {
+		authorizationEndpoint: n.authorization_endpoint,
+		tokenEndpoint: n.token_endpoint,
+		registrationEndpoint: r,
+		codeChallengeMethods: i
+	};
+}
+async function Ae(e, t, n) {
+	if (!t.registrationEndpoint) throw Error("OAuth client registration is not available for this Picked API.");
+	let r = await fetch(t.registrationEndpoint, {
+		method: "POST",
+		headers: { "content-type": "application/json" },
+		body: JSON.stringify({
+			client_name: "Picked CLI",
+			redirect_uris: [n],
+			grant_types: ["authorization_code", "refresh_token"],
+			response_types: ["code"],
+			token_endpoint_auth_method: "none"
+		})
+	});
+	if (!r.ok) throw Error(`OAuth client registration failed (${r.status.toString()}).`);
+	let i = await r.json();
+	if (typeof i != "object" || !i || !("client_id" in i) || typeof i.client_id != "string") throw Error("OAuth client registration returned an unexpected response.");
+	return await xe(e, {
+		clientId: i.client_id,
+		redirectUri: n
+	}), i.client_id;
+}
+async function je(e, t, n) {
+	let r = (await O(e))?.client;
+	return r?.redirectUri === n ? r.clientId : Ae(e, t, n);
+}
+function Me(e, t) {
+	return new Promise((n) => {
+		let r = () => {
+			e.removeListener("error", r), n(!1);
+		};
+		e.once("error", r), e.listen(t, "127.0.0.1", () => {
+			e.removeListener("error", r), n(!0);
+		});
+	});
+}
+async function Ne(e) {
+	for (let t of M) if (await Me(e, t)) return t;
+	throw Error(`No loopback port available for the OAuth callback (tried ${M.join(", ")}).`);
+}
+function Pe(e, t, n) {
+	return new Promise((r, i) => {
+		let a = () => {
+			clearTimeout(o), process.removeListener("SIGINT", s), e.close();
+		}, o = setTimeout(() => {
+			a(), i(/* @__PURE__ */ Error("Timed out waiting for the browser sign-in to complete."));
+		}, n), s = () => {
+			a(), i(/* @__PURE__ */ Error("Sign-in cancelled."));
+		};
+		process.once("SIGINT", s), e.on("request", (e, n) => {
+			let o = new URL(e.url ?? "/", "http://127.0.0.1");
+			if (o.pathname !== "/callback") {
+				n.writeHead(404), n.end();
+				return;
+			}
+			let s = o.searchParams.get("error");
+			if (s) {
+				n.writeHead(200, { "content-type": "text/html" }), n.end("<html><body>Sign-in failed. You can close this tab.</body></html>"), a(), i(/* @__PURE__ */ Error(`Authorization failed: ${s}`));
+				return;
+			}
+			let c = o.searchParams.get("code"), l = o.searchParams.get("state");
+			if (!c || l !== t) {
+				n.writeHead(400, { "content-type": "text/html" }), n.end("<html><body>Invalid sign-in response. Close this tab and try again.</body></html>"), a(), i(/* @__PURE__ */ Error("Invalid OAuth callback: missing code or state mismatch."));
+				return;
+			}
+			n.writeHead(200, { "content-type": "text/html" }), n.end("<html><body>Signed in. You can close this tab and return to the terminal.</body></html>"), a(), r({ code: c });
+		});
+	});
+}
+async function P(e) {
+	let t;
+	try {
+		t = await e.json();
+	} catch {
+		return null;
+	}
+	if (typeof t != "object" || !t || !("access_token" in t) || typeof t.access_token != "string" || !("expires_in" in t) || typeof t.expires_in != "number") return null;
+	let n = "refresh_token" in t && typeof t.refresh_token == "string" ? t.refresh_token : void 0;
+	return {
+		accessToken: t.access_token,
+		refreshToken: n,
+		expiresIn: t.expires_in
+	};
+}
+function Fe(e) {
+	let t = e.split("."), n = t[1];
+	if (t.length !== 3 || !n) return {};
+	try {
+		let e = JSON.parse(Buffer.from(n, "base64url").toString("utf8"));
+		return typeof e != "object" || !e ? {} : {
+			id: "sub" in e && typeof e.sub == "string" ? e.sub : void 0,
+			email: "email" in e && typeof e.email == "string" ? e.email : void 0
+		};
+	} catch {
+		return {};
+	}
+}
+async function Ie(e) {
+	let t = await N(e), n = o(), r = `http://127.0.0.1:${(await Ne(n)).toString()}/callback`, i = await je(e, t, r), a = Te(), s = Ee(a), c = De(), l = new URL(t.authorizationEndpoint);
+	l.searchParams.set("response_type", "code"), l.searchParams.set("client_id", i), l.searchParams.set("redirect_uri", r), l.searchParams.set("code_challenge", s), l.searchParams.set("code_challenge_method", "S256"), l.searchParams.set("state", c), l.searchParams.set("scope", ke), console.log(`Opening your browser to sign in...\n${l.toString()}`), await pe(l.toString());
+	let { code: u } = await Pe(n, c, Oe), d = new URLSearchParams({
+		grant_type: "authorization_code",
+		code: u,
+		redirect_uri: r,
+		client_id: i,
+		code_verifier: a
+	}), f = await fetch(t.tokenEndpoint, {
+		method: "POST",
+		headers: { "content-type": "application/x-www-form-urlencoded" },
+		body: d.toString()
+	});
+	if (!f.ok) throw Error(`Token exchange failed (${f.status.toString()}).`);
+	let p = await P(f);
+	if (!p?.refreshToken) throw Error("Token exchange did not return a refresh token.");
+	return {
+		accessToken: p.accessToken,
+		refreshToken: p.refreshToken,
+		expiresAt: Date.now() + p.expiresIn * 1e3,
+		user: Fe(p.accessToken)
+	};
+}
+async function Le(e) {
+	if (!e.client || !e.session) throw Error("Session expired. Run `picked login`.");
+	let t = await N(e.apiUrl), n = new URLSearchParams({
+		grant_type: "refresh_token",
+		refresh_token: e.session.refreshToken,
+		client_id: e.client.clientId
+	}), r;
+	try {
+		r = await fetch(t.tokenEndpoint, {
+			method: "POST",
+			headers: { "content-type": "application/x-www-form-urlencoded" },
+			body: n.toString()
+		});
+	} catch {
+		throw Error("Session expired. Run `picked login`.");
+	}
+	if (!r.ok) throw Error("Session expired. Run `picked login`.");
+	let i = await P(r);
+	if (!i) throw Error("Session expired. Run `picked login`.");
+	return {
+		accessToken: i.accessToken,
+		refreshToken: i.refreshToken ?? e.session.refreshToken,
+		expiresAt: Date.now() + i.expiresIn * 1e3,
+		user: e.session.user
+	};
+}
+//#endregion
+//#region src/auth/session.ts
+var Re = 6e4;
+async function F(e) {
+	let t = await O(e);
+	if (!t?.session) throw Error(`Not logged in to ${e}. Run \`picked login\`.`);
+	if (t.session.expiresAt - Date.now() > Re) return t.session.accessToken;
+	let n = await Le(t);
+	return await A(e, n), n.accessToken;
+}
+//#endregion
+//#region src/lib/admin-client.ts
+function I() {
+	let e = process.env.PICKED_API_KEY?.trim();
+	return e === "" ? void 0 : e;
+}
+async function L(e) {
+	let t = I();
+	return t ? C({
+		apiUrl: e,
+		apiKey: t
+	}) : (await F(e), C({
+		apiUrl: e,
+		token: () => F(e)
+	}));
+}
+//#endregion
+//#region src/lib/api-url.ts
+var ze = "https://api.picked.app";
+async function R(e = process.cwd()) {
+	let n = process.env.PICKED_API_URL;
+	if (n) return r(n);
+	let i = await t(e);
+	return r(i?.apiUrl ?? ze);
+}
+//#endregion
+//#region src/commands/login.ts
+async function Be(e) {
+	let t = await R(e?.cwd);
+	if (I()) return console.error(`\`picked login\` does not apply while PICKED_API_KEY is set: every command authenticates to ${t} with that API key. Unset PICKED_API_KEY to sign in as a user.`), 1;
+	try {
+		let e = await Ie(t);
+		await A(t, e);
+		let n = e.user?.email ?? e.user?.id ?? "unknown user";
+		return console.log(`Logged in as ${n} (${t})`), 0;
+	} catch (e) {
+		let t = e instanceof Error ? e.message : String(e);
+		return console.error(t), 1;
+	}
+}
+//#endregion
+//#region src/commands/logout.ts
+async function Ve(e) {
+	let t = await R(e?.cwd);
+	return await Se(t), console.log(`Logged out of ${t}.`), 0;
+}
+//#endregion
+//#region src/commands/status.ts
+async function He(e) {
+	let n = e?.cwd ?? process.cwd(), r = await t(n);
+	if (!r) return console.error("No picked.config.{ts,js,json} found in the current directory."), 1;
+	let a = await R(n);
+	console.log(`API: ${a}`), console.log(`Config default: project ${r.projectId} (source: ${r.source ?? "published"})`);
+	let o = await i(n, a);
+	if (!o) return console.log("Active selection: none (using the config default)."), 0;
+	if (!o.workspace) return console.log(`Active selection: live (published) in project ${o.projectId}`), 0;
+	let { name: s, status: c, source: l } = o.workspace;
+	return console.log(`Active selection: ${s} [${c}] in project ${o.projectId} (source: ${l})`), 0;
+}
+//#endregion
+//#region src/commands/whoami.ts
+async function Ue(e) {
+	let t = await R(e?.cwd);
+	if (I()) return console.error(`\`picked whoami\` does not apply while PICKED_API_KEY is set: an API key authenticates to ${t} as a project or organization, not as a user.`), 1;
+	let n = await O(t);
+	if (!n?.session) return console.error(`Not logged in to ${t}. Run \`picked login\`.`), 1;
+	let { user: r } = n.session, i = r?.email ?? r?.id ?? "unknown user";
+	return console.log(`${i} (${t})`), 0;
+}
+//#endregion
+//#region src/lib/bundle.ts
+var z = "bundle.json", B = "assets", We = /^[0-9a-f]{64}$/;
+function V(e, t, n) {
+	let r = y(e), i = y(r, t);
+	if (!i.startsWith(r.endsWith(b) ? r : r + b)) throw Error(`${n} ${t} must name a directory inside ${r}.`);
+	return i;
+}
+function H(e) {
+	return typeof e == "object" && !!e && !Array.isArray(e);
+}
+function Ge(e) {
+	return x("sha256").update(e).digest("hex");
+}
+function U(e, t) {
+	return v(e, B, t);
+}
+function Ke(e, t) {
+	let n = `bundle assets[${String(t)}]`;
+	if (!H(e)) throw Error(`${n} is not an object.`);
+	let { versionId: r, fileName: i, mimeType: a, sizeBytes: o, sha256: s, downloadUrl: c } = e;
+	if (typeof r != "string" || typeof i != "string" || typeof a != "string" || typeof c != "string" || typeof o != "number" || !Number.isInteger(o) || o < 0) throw Error(`${n} needs a string versionId, fileName, mimeType and downloadUrl, and an integer sizeBytes.`);
+	if (s === null) return {
+		versionId: r,
+		fileName: i,
+		mimeType: a,
+		sizeBytes: o,
+		sha256: s,
+		downloadUrl: c
+	};
+	let l = typeof s == "string" ? s.toLowerCase() : "";
+	if (!We.test(l)) throw Error(`${n} (${i}) has a sha256 that is not a hex SHA-256 digest.`);
+	return {
+		versionId: r,
+		fileName: i,
+		mimeType: a,
+		sizeBytes: o,
+		sha256: l,
+		downloadUrl: c
+	};
+}
+function W(e) {
+	let { assets: t } = e;
+	if (!Array.isArray(t)) throw Error("The bundle has no assets array.");
+	return t.map((e, t) => Ke(e, t));
+}
+function G(e, t, n) {
+	if (t.byteLength !== e.sizeBytes) throw Error(`${e.fileName} (${n}) has size ${String(t.byteLength)} bytes; the manifest says ${String(e.sizeBytes)}.`);
+	let r = Ge(t);
+	if (e.sha256 !== null && r !== e.sha256) throw Error(`${e.fileName} (${n}) has SHA-256 ${r}; the manifest says ${e.sha256}.`);
+	return r;
+}
+function qe(e, t) {
+	let n = Array.isArray(e.assets) ? e.assets : [];
+	return {
+		...e,
+		assets: n.map((e, n) => H(e) ? {
+			...e,
+			sha256: t[n]
+		} : e)
+	};
+}
+//#endregion
+//#region src/lib/workspace-transfer.ts
+var Je = 12e4, Ye = 3e5, K = class extends Error {
+	name = "PayloadUserErrorsError";
+};
+function q(e, t) {
+	if (t.length !== 0) throw new K(`${e} failed:\n${t.map((e) => {
+		let t = e.field?.length ? ` (${e.field.join(".")})` : "";
+		return `  ${e.code}: ${e.message}${t}`;
+	}).join("\n")}`);
+}
+async function Xe(e, t) {
+	let { project: n } = await e.request(se, { input: { id: t } });
+	if (!n) throw Error(`Project ${t} was not found.`);
+	let r = n.liveWorkspaceVersion;
+	if (!r) throw Error(`Project ${t} has no published version.`);
+	if (!r.snapshotWorkspaceId) throw Error(`The live version ${r.id} of project ${t} has no snapshot workspace to export. Publish the project again.`);
+	return r.snapshotWorkspaceId;
+}
+async function Ze(e, t) {
+	let { workspaceExport: n } = await e.request(ce, { input: { workspaceId: t } });
+	if (q(`Export of workspace ${t}`, n.userErrors), !H(n.bundle)) throw Error(`Export of workspace ${t} returned no bundle.`);
+	return n.bundle;
+}
+async function Qe(e, t) {
+	let { projectId: n, fileName: r, mimeType: i, sha256: a, bytes: o } = t, { assetUploadInit: s } = await e.request(oe, { input: {
+		projectId: n,
+		fileName: r,
+		contentType: i,
+		sha256: a
+	} });
+	if (s.deduplicated) return {
+		assetId: s.assetId,
+		versionId: s.versionId,
+		deduplicated: !0
+	};
+	if (!s.uploadUrl) throw Error(`The API returned no upload URL for ${r}.`);
+	let c = await fetch(s.uploadUrl, {
+		method: "PUT",
+		headers: { "Content-Type": i },
+		body: o,
+		signal: AbortSignal.timeout(Je)
+	});
+	if (!c.ok) throw Error(`Upload of ${r} failed with status ${String(c.status)}: ${await c.text()}`);
+	let { assetCommit: l } = await e.request(ie, { input: {
+		projectId: n,
+		assetId: s.assetId,
+		versionId: s.versionId,
+		fileName: r,
+		storagePath: s.storagePath,
+		sha256: a
+	} });
+	return q(`Commit of ${r}`, l.userErrors), {
+		assetId: s.assetId,
+		versionId: s.versionId,
+		deduplicated: !1
+	};
+}
+async function $e(e, t) {
+	await e.request(ae, { input: { id: t } });
+}
+async function et(e, t) {
+	let { workspaceImport: n } = await e.request(le, { input: t }, { timeoutMs: Ye });
+	if (q(`Import into project ${t.projectId}`, n.userErrors), !n.workspace) throw Error(`Import into project ${t.projectId} returned no workspace.`);
+	return n.workspace;
+}
+async function tt(e, t) {
+	let { workspacePublish: n } = await e.request(ue, { input: { workspaceId: t } });
+	q(`Publish of workspace ${t}`, n.userErrors);
+}
+//#endregion
+//#region src/commands/workspace-export.ts
+var nt = 12e4;
+function rt(e, t) {
+	if (!e.project) throw Error("Missing --project <id>.");
+	if (e.workspace && e.live) throw Error("Pass --workspace <id> or --live, not both.");
+	if (!e.workspace && !e.live) throw Error("Pass --workspace <id> or --live.");
+	if (!e.out) throw Error("Missing --out <dir>.");
+	return {
+		projectId: e.project,
+		workspaceId: e.workspace ?? null,
+		outDir: V(t, e.out, "--out")
+	};
+}
+async function it(e) {
+	if ((await p(e).catch((e) => {
+		if (H(e) && e.code === "ENOENT") return [];
+		throw e;
+	})).length > 0) throw Error(`${e} is not empty. Export into a new or empty directory.`);
+}
+async function at(e) {
+	let t = await fetch(e.downloadUrl, { signal: AbortSignal.timeout(nt) });
+	if (!t.ok) throw Error(`Download of ${e.fileName} from ${e.downloadUrl} failed with status ${String(t.status)}.`);
+	let n = new Uint8Array(await t.arrayBuffer());
+	return {
+		bytes: n,
+		sha256: G(e, n, e.downloadUrl)
+	};
+}
+async function ot(e, t, n) {
+	await u(v(e, B));
+	let r = [];
+	for (let t of n) {
+		let { bytes: n, sha256: i } = await at(t);
+		await g(U(e, i), n), r.push(i);
+	}
+	let i = qe(t, r);
+	await g(v(e, z), `${JSON.stringify(i, null, 2)}\n`);
+}
+async function st(e, t, n) {
+	await u(_(e), { recursive: !0 });
+	let r = await d(v(_(e), `.${te(e)}.partial-`));
+	try {
+		await ot(r, t, n), await ee(e).catch((e) => {
+			if (!(H(e) && e.code === "ENOENT")) throw e;
+		}), await m(r, e);
+	} catch (e) {
+		throw await h(r, {
+			recursive: !0,
+			force: !0
+		}), e;
+	}
+}
+async function ct(e, t) {
+	let n = t.workspaceId ?? await Xe(e, t.projectId), r = await Ze(e, n), i = H(r.source) ? r.source.projectId : void 0;
+	if (i !== t.projectId) throw Error(`Workspace ${n} belongs to project ${String(i)}, not ${t.projectId}.`);
+	return r;
+}
+async function lt(e) {
+	try {
+		let t = rt(e, e.cwd ?? process.cwd());
+		await it(t.outDir);
+		let n = await ct(await L(await R(e.cwd)), t), r = W(n);
+		await st(t.outDir, n, r);
+		let i = H(n.workspace) ? String(n.workspace.name) : "";
+		return console.log(`Exported workspace "${i}" with ${String(r.length)} assets to ${t.outDir}`), 0;
+	} catch (e) {
+		let t = e instanceof Error ? e.message : String(e);
+		return console.error(t), 1;
+	}
+}
+//#endregion
+//#region src/commands/workspace-import.ts
+async function ut(e) {
+	let t = v(e, z), n = await f(t, "utf8").catch((e) => {
+		throw Error(`Cannot read ${t}. Pass the directory \`picked workspace export\` wrote.`, { cause: e });
+	}), r = JSON.parse(n);
+	if (!H(r)) throw Error(`${t} is not a JSON object.`);
+	return r;
+}
+async function dt(e, t) {
+	let n = [];
+	for (let r of t) {
+		if (r.sha256 === null) throw Error(`The manifest item for ${r.fileName} has no SHA-256. Export the bundle with \`picked workspace export\`.`);
+		let t = U(e, r.sha256), i = new Uint8Array(await f(t));
+		n.push({
+			asset: r,
+			sha256: G(r, i, t),
+			bytes: i
+		});
+	}
+	return n;
+}
+async function ft(e, t, n, r) {
+	let i = [];
+	for (let { asset: a, sha256: o, bytes: s } of n) {
+		let n = await Qe(e, {
+			projectId: t,
+			fileName: a.fileName,
+			mimeType: a.mimeType,
+			sha256: o,
+			bytes: s
+		});
+		n.deduplicated || r.push(n.assetId), i.push({
+			sourceVersionId: a.versionId,
+			assetId: n.assetId,
+			versionId: n.versionId
+		});
+	}
+	return i;
+}
+async function J(e, t) {
+	let n = [], r = [];
+	for (let i of t) try {
+		await $e(e, i), n.push(i);
+	} catch (e) {
+		let t = e instanceof Error ? e.message : String(e);
+		r.push(`Could not delete asset ${i} (${t}); delete it from the project by hand.`);
+	}
+	return [...n.length > 0 ? [`Deleted the ${String(n.length)} asset${n.length === 1 ? "" : "s"} this run uploaded: ${n.join(", ")}.`] : [], ...r].join("\n");
+}
+function Y(e, t) {
+	let n = e instanceof Error ? e.message : String(e);
+	return Error(t ? `${n}\n${t}` : n, { cause: e });
+}
+function pt(e) {
+	let t = ["The outcome of the import is unknown: the API may have created the workspace. Check the project for it before you import again."];
+	return e.length > 0 && t.push(`Kept the ${String(e.length)} asset${e.length === 1 ? "" : "s"} this run uploaded: ${e.join(", ")}. If the project has no new workspace, delete them from the project.`), t.join("\n");
+}
+var mt = /* @__PURE__ */ new Set([
+	"FORBIDDEN",
+	"UNAUTHENTICATED",
+	"BAD_USER_INPUT",
+	"GRAPHQL_VALIDATION_FAILED"
+]);
+function ht(e) {
+	return e instanceof K || e instanceof re && e.codes.length > 0 && e.codes.every((e) => e !== void 0 && mt.has(e));
+}
+async function gt(e, t) {
+	let n = [], r = await ft(e, t.projectId, t.assets, n).catch(async (t) => {
+		throw Y(t, await J(e, n));
+	});
+	return {
+		workspace: await et(e, {
+			projectId: t.projectId,
+			name: t.name,
+			bundle: t.bundle,
+			assetMap: r
+		}).catch(async (t) => {
+			throw Y(t, ht(t) ? await J(e, n) : pt(n));
+		}),
+		uploaded: n.length
+	};
+}
+async function _t(e) {
+	try {
+		if (!e.project) throw Error("Missing --project <id>.");
+		if (!e.in) throw Error("Missing --in <dir>.");
+		let t = e.project, n = V(e.cwd ?? process.cwd(), e.in, "--in"), r = await ut(n), i = await dt(n, W(r)), a = await L(await R(e.cwd)), { workspace: o, uploaded: s } = await gt(a, {
+			projectId: t,
+			name: e.name,
+			bundle: r,
+			assets: i
+		});
+		return console.log(`Imported workspace "${o.name}" as ${o.id} into project ${t} (assets: ${String(s)} uploaded, ${String(i.length - s)} already in the project).`), e.publish && (await tt(a, o.id).catch((e) => {
+			let t = e instanceof Error ? e.message : String(e);
+			throw Error(`Workspace ${o.id} was imported, but not published. ${t}`, { cause: e });
+		}), console.log(`Published workspace ${o.id}.`)), 0;
+	} catch (e) {
+		let t = e instanceof Error ? e.message : String(e);
+		return console.error(t), 1;
+	}
+}
+//#endregion
+//#region src/lib/workspaces.ts
+var vt = w("\n  query PickedWorkspaces {\n    user {\n      organizations(first: 50) {\n        edges {\n          node {\n            id\n            name\n            slug\n            projects(first: 100) {\n              edges {\n                node {\n                  id\n                  name\n                  liveWorkspace {\n                    id\n                  }\n                  liveWorkspaceVersion {\n                    id\n                  }\n                  workspaces(first: 100) {\n                    edges {\n                      node {\n                        id\n                        name\n                        status\n                      }\n                    }\n                  }\n                }\n              }\n            }\n          }\n        }\n      }\n    }\n  }\n"), yt = w("\n  query PickedPreviewToken($id: ID!, $projectId: ID!) {\n    workspace(id: $id, projectId: $projectId) {\n      id\n      name\n      status\n      previewToken\n    }\n  }\n");
+async function X(e) {
+	let t = await e.request(vt, {});
+	if (!t.user) throw Error("Not signed in as a user, or no organizations are visible to this account. An API key has no organization list.");
+	return t.user.organizations.edges.map((e) => {
+		let t = e.node;
+		return {
+			id: t.id,
+			name: t.name,
+			slug: t.slug ?? "",
+			projects: t.projects.edges.map((e) => {
+				let t = e.node;
+				return {
+					id: t.id,
+					name: t.name,
+					liveWorkspaceId: t.liveWorkspace?.id ?? null,
+					liveVersionId: t.liveWorkspaceVersion?.id ?? null,
+					workspaces: t.workspaces.edges.map((e) => ({
+						id: e.node.id,
+						name: e.node.name,
+						status: e.node.status
+					}))
+				};
+			})
+		};
+	});
+}
+async function Z(e, t, n) {
+	let r = (await e.request(yt, {
+		id: n,
+		projectId: t
+	})).workspace;
+	if (!r) throw Error(`Workspace "${n}" was not found in project "${t}".`);
+	return {
+		status: r.status,
+		name: r.name,
+		previewToken: r.previewToken
+	};
+}
+//#endregion
+//#region src/commands/workspace-list.ts
+function bt(e) {
+	for (let t of e) {
+		console.log(`${t.name} (${t.slug})`);
+		for (let e of t.projects) {
+			console.log(`  ${e.name} [${e.id}]`);
+			for (let t of e.workspaces) {
+				let n = t.status === "LIVE" || t.id === e.liveWorkspaceId ? " (live)" : "";
+				console.log(`    ${t.name} [${t.status}]${n}`);
+			}
+		}
+	}
+}
+async function xt(e) {
+	try {
+		let t = await X(await L(await R(e?.cwd)));
+		return e?.json ? (console.log(JSON.stringify(t, null, 2)), 0) : (bt(t), 0);
+	} catch (e) {
+		let t = e instanceof Error ? e.message : String(e);
+		return console.error(t), 1;
+	}
+}
+//#endregion
+//#region src/lib/prompt.ts
+function St(e, t) {
+	return new Promise((n) => {
+		e.question(t, n);
+	});
+}
+async function Q(e, t) {
+	if (t.length === 0) throw Error("No choices available to select from.");
+	let n = de({
+		input: process.stdin,
+		output: process.stderr
+	});
+	process.stderr.write(`${e}\n`), t.forEach((e, t) => {
+		process.stderr.write(`  ${(t + 1).toString()}. ${e.label}\n`);
+	});
+	try {
+		for (;;) {
+			let e = await St(n, `Enter a number (1-${t.length.toString()}): `), r = Number.parseInt(e, 10), i = Number.isInteger(r) ? t[r - 1] : void 0;
+			if (i) return i.value;
+			process.stderr.write("Invalid choice, try again.\n");
+		}
+	} finally {
+		n.close();
+	}
+}
+//#endregion
+//#region src/commands/workspace-use.ts
+function $(e, t, n) {
+	return {
+		projectId: e,
+		workspace: {
+			id: t,
+			name: n.name,
+			status: n.status,
+			source: "preview",
+			previewToken: n.previewToken
+		}
+	};
+}
+async function Ct(e, t, n) {
+	return n ? $(t, n, await Z(e, t, n)) : { projectId: t };
+}
+async function wt(e) {
+	let t = await Q("Select a project", (await X(e)).flatMap((e) => e.projects.map((t) => ({
+		label: `${e.name} / ${t.name}`,
+		value: t
+	})))), n = t.workspaces.map((e) => ({
+		label: `${e.name} [${e.status}]`,
+		value: e
+	}));
+	t.liveVersionId && n.unshift({
+		label: "Published (live version)",
+		value: null
+	});
+	let r = await Q("Select a workspace", n);
+	if (!r) return { projectId: t.id };
+	r.status === "ARCHIVED" && console.error("Warning: archived workspaces may fail to load via the delivery API.");
+	let i = await Z(e, t.id, r.id);
+	return $(t.id, r.id, i);
+}
+function Tt(e) {
+	if (!e.workspace) {
+		console.log(`Active workspace: live (published) in project ${e.projectId}`);
+		return;
+	}
+	let { name: t, status: n, source: r } = e.workspace;
+	console.log(`Active workspace: ${t} [${n}] in project ${e.projectId} (source: ${r})`);
+}
+async function Et(e) {
+	let t = e?.cwd ?? process.cwd();
+	try {
+		let n = await R(t), r = await L(n), i = e?.project ? await Ct(r, e.project, e.workspace) : await wt(r);
+		return await a(t, n, i), Tt(i), e?.generate !== !1 && await T({ cwd: t }), 0;
+	} catch (e) {
+		let t = e instanceof Error ? e.message : String(e);
+		return console.error(t), 1;
+	}
+}
+//#endregion
+export { Ue as a, Be as c, lt as i, T as l, xt as n, He as o, _t as r, Ve as s, Et as t };