@picked/cli 0.0.85-next.4 → 0.0.85-next.5

package/package.json

@@ -1,15 +1,15 @@
 {
   "name": "@picked/cli",
   "description": "Picked command-line interface for local development workflows",
-  "version": "0.0.85-next.4",
+  "version": "0.0.85-next.5",
   "bin": {
     "picked": "dist/esm/cli.js"
   },
   "dependencies": {
-    "@picked/admin-api-client": "0.0.85-next.4",
-    "@picked/config": "0.0.85-next.4",
-    "@picked/telemetry": "0.0.85-next.4",
-    "@picked/typegen": "0.0.85-next.4"
+    "@picked/admin-api-client": "0.0.85-next.5",
+    "@picked/config": "0.0.85-next.5",
+    "@picked/telemetry": "0.0.85-next.5",
+    "@picked/typegen": "0.0.85-next.5"
   },
   "devDependencies": {
     "@repo/eslint-config": "workspace:*",
@@ -51,6 +51,7 @@
     "ignoreDependencies": [
       "@picked/admin-api-client",
       "@picked/config",
+      "@picked/telemetry",
       "@picked/typegen",
       "@repo/eslint-config",
       "@repo/typescript-config",

package/dist/workspace-use-CT6_jewh.cjs

@@ -1,48 +0,0 @@
-let e=require("@picked/typegen"),t=require("@picked/config"),n=require("node:http"),r=require("node:child_process"),i=require("node:fs"),a=require("node:fs/promises"),o=require("node:path"),s=require("node:crypto"),c=require("node:os"),l=require("@picked/admin-api-client"),u=require("node:readline");async function d(n){let r=n?.cwd??process.cwd(),i=await(0,t.loadResolvedPickedConfig)(r);if(!i)return console.error(`No picked.config.{ts,js,json} found in the current directory.`),1;try{let t=await(0,e.generate)({config:i,check:n?.check??!1,onWarn:e=>{console.warn(e)}});return n?.check?t.changed?(console.error(`Types are out of date: ${t.typesOutput}`),1):(console.log(`Types are up to date (${t.typesOutput}).`),0):(console.log(`Generated types at ${t.typesOutput}`),0)}catch(e){let t=e instanceof Error?e.message:String(e);return console.error(t),1}}function f(e){return process.platform===`darwin`?{command:`open`,args:[e]}:process.platform===`win32`?{command:`cmd`,args:[`/c`,`start`,`""`,e]}:{command:`xdg-open`,args:[e]}}function p(e){let{command:t,args:n}=f(e);try{let e=(0,r.spawn)(t,n,{detached:!0,stdio:`ignore`});e.on(`error`,()=>void 0),e.unref()}catch{}return Promise.resolve()}var m=8;function ee(){return(0,o.join)((0,c.homedir)(),`.picked`)}function h(e){let n=(0,t.normalizeApiUrl)(e),{hostname:r,port:i}=new URL(n);return`${(i?`${r}-${i}`:r).replace(/[^a-z0-9.-]/gi,`_`)}-${(0,s.createHash)(`sha256`).update(n).digest(`hex`).slice(0,m)}`}function g(e){return(0,o.join)(ee(),`auth`,`${h(e)}.json`)}var _=384;function v(e){return typeof e==`object`&&!!e&&`clientId`in e&&typeof e.clientId==`string`&&`redirectUri`in e&&typeof e.redirectUri==`string`}function y(e){return!(typeof e!=`object`||!e||!(`accessToken`in e)||typeof e.accessToken!=`string`||!(`refreshToken`in e)||typeof e.refreshToken!=`string`||!(`expiresAt`in e)||typeof e.expiresAt!=`number`||`user`in e&&e.user!==void 0&&(typeof e.user!=`object`||e.user===null))}function b(e){return!(typeof e!=`object`||!e||!(`apiUrl`in e)||typeof e.apiUrl!=`string`||`client`in e&&e.client!==void 0&&!v(e.client)||`session`in e&&e.session!==void 0&&!y(e.session))}async function x(e){let t=g(e);if(!(0,i.existsSync)(t))return null;try{let e=JSON.parse(await(0,a.readFile)(t,`utf8`));return b(e)?e:null}catch{return null}}async function S(e){let t=g(e.apiUrl);await(0,a.mkdir)((0,o.dirname)(t),{recursive:!0});let n=`${t}.${process.pid.toString()}.tmp`;await(0,a.writeFile)(n,`${JSON.stringify(e,null,2)}\n`,{encoding:`utf8`,mode:_}),await(0,a.chmod)(n,_),await(0,a.rename)(n,t)}async function C(e,n){let r=await x(e);await S({apiUrl:(0,t.normalizeApiUrl)(e),client:r?.client,session:r?.session,...n})}async function te(e,t){await C(e,{client:t})}async function w(e,t){await C(e,{session:t})}async function ne(e){await(0,a.rm)(g(e),{force:!0})}var re=32,ie=16;function T(e){return e.toString(`base64`).replaceAll(`+`,`-`).replaceAll(`/`,`_`).replaceAll(`=`,``)}function E(){return T((0,s.randomBytes)(re))}function D(e){return T((0,s.createHash)(`sha256`).update(e).digest())}function O(){return T((0,s.randomBytes)(ie))}var k=[8976,8977,8988],A=18e4,j=`openid profile email`;async function M(e){let t;try{t=await fetch(`${e}/.well-known/oauth-authorization-server`)}catch(e){let t=e instanceof Error?e.message:String(e);throw Error(`Failed to reach the Picked OAuth discovery endpoint: ${t}`)}if(!t.ok)throw Error(`OAuth discovery request failed (${t.status.toString()}).`);let n=await t.json();if(typeof n!=`object`||!n)throw Error(`Malformed OAuth discovery document.`);if(!(`authorization_endpoint`in n)||typeof n.authorization_endpoint!=`string`)throw Error(`OAuth discovery document is missing authorization_endpoint.`);if(!(`token_endpoint`in n)||typeof n.token_endpoint!=`string`)throw Error(`OAuth discovery document is missing token_endpoint.`);let r=`registration_endpoint`in n&&typeof n.registration_endpoint==`string`?n.registration_endpoint:void 0,i=`code_challenge_methods_supported`in n&&Array.isArray(n.code_challenge_methods_supported)?n.code_challenge_methods_supported.filter(e=>typeof e==`string`):void 0;return{authorizationEndpoint:n.authorization_endpoint,tokenEndpoint:n.token_endpoint,registrationEndpoint:r,codeChallengeMethods:i}}async function N(e,t,n){if(!t.registrationEndpoint)throw Error(`OAuth client registration is not available for this Picked API.`);let r=await fetch(t.registrationEndpoint,{method:`POST`,headers:{"content-type":`application/json`},body:JSON.stringify({client_name:`Picked CLI`,redirect_uris:[n],grant_types:[`authorization_code`,`refresh_token`],response_types:[`code`],token_endpoint_auth_method:`none`})});if(!r.ok)throw Error(`OAuth client registration failed (${r.status.toString()}).`);let i=await r.json();if(typeof i!=`object`||!i||!(`client_id`in i)||typeof i.client_id!=`string`)throw Error(`OAuth client registration returned an unexpected response.`);return await te(e,{clientId:i.client_id,redirectUri:n}),i.client_id}async function P(e,t,n){let r=(await x(e))?.client;return r?.redirectUri===n?r.clientId:N(e,t,n)}function F(e,t){return new Promise(n=>{let r=()=>{e.removeListener(`error`,r),n(!1)};e.once(`error`,r),e.listen(t,`127.0.0.1`,()=>{e.removeListener(`error`,r),n(!0)})})}async function I(e){for(let t of k)if(await F(e,t))return t;throw Error(`No loopback port available for the OAuth callback (tried ${k.join(`, `)}).`)}function L(e,t,n){return new Promise((r,i)=>{let a=()=>{clearTimeout(o),process.removeListener(`SIGINT`,s),e.close()},o=setTimeout(()=>{a(),i(Error(`Timed out waiting for the browser sign-in to complete.`))},n),s=()=>{a(),i(Error(`Sign-in cancelled.`))};process.once(`SIGINT`,s),e.on(`request`,(e,n)=>{let o=new URL(e.url??`/`,`http://127.0.0.1`);if(o.pathname!==`/callback`){n.writeHead(404),n.end();return}let s=o.searchParams.get(`error`);if(s){n.writeHead(200,{"content-type":`text/html`}),n.end(`<html><body>Sign-in failed. You can close this tab.</body></html>`),a(),i(Error(`Authorization failed: ${s}`));return}let c=o.searchParams.get(`code`),l=o.searchParams.get(`state`);if(!c||l!==t){n.writeHead(400,{"content-type":`text/html`}),n.end(`<html><body>Invalid sign-in response. Close this tab and try again.</body></html>`),a(),i(Error(`Invalid OAuth callback: missing code or state mismatch.`));return}n.writeHead(200,{"content-type":`text/html`}),n.end(`<html><body>Signed in. You can close this tab and return to the terminal.</body></html>`),a(),r({code:c})})})}async function R(e){let t;try{t=await e.json()}catch{return null}if(typeof t!=`object`||!t||!(`access_token`in t)||typeof t.access_token!=`string`||!(`expires_in`in t)||typeof t.expires_in!=`number`)return null;let n=`refresh_token`in t&&typeof t.refresh_token==`string`?t.refresh_token:void 0;return{accessToken:t.access_token,refreshToken:n,expiresIn:t.expires_in}}function z(e){let t=e.split(`.`),n=t[1];if(t.length!==3||!n)return{};try{let e=JSON.parse(Buffer.from(n,`base64url`).toString(`utf8`));return typeof e!=`object`||!e?{}:{id:`sub`in e&&typeof e.sub==`string`?e.sub:void 0,email:`email`in e&&typeof e.email==`string`?e.email:void 0}}catch{return{}}}async function B(e){let t=await M(e),r=(0,n.createServer)(),i=`http://127.0.0.1:${(await I(r)).toString()}/callback`,a=await P(e,t,i),o=E(),s=D(o),c=O(),l=new URL(t.authorizationEndpoint);l.searchParams.set(`response_type`,`code`),l.searchParams.set(`client_id`,a),l.searchParams.set(`redirect_uri`,i),l.searchParams.set(`code_challenge`,s),l.searchParams.set(`code_challenge_method`,`S256`),l.searchParams.set(`state`,c),l.searchParams.set(`scope`,j),console.log(`Opening your browser to sign in...\n${l.toString()}`),await p(l.toString());let{code:u}=await L(r,c,A),d=new URLSearchParams({grant_type:`authorization_code`,code:u,redirect_uri:i,client_id:a,code_verifier:o}),f=await fetch(t.tokenEndpoint,{method:`POST`,headers:{"content-type":`application/x-www-form-urlencoded`},body:d.toString()});if(!f.ok)throw Error(`Token exchange failed (${f.status.toString()}).`);let m=await R(f);if(!m?.refreshToken)throw Error(`Token exchange did not return a refresh token.`);return{accessToken:m.accessToken,refreshToken:m.refreshToken,expiresAt:Date.now()+m.expiresIn*1e3,user:z(m.accessToken)}}async function ae(e){if(!e.client||!e.session)throw Error("Session expired. Run `picked login`.");let t=await M(e.apiUrl),n=new URLSearchParams({grant_type:`refresh_token`,refresh_token:e.session.refreshToken,client_id:e.client.clientId}),r;try{r=await fetch(t.tokenEndpoint,{method:`POST`,headers:{"content-type":`application/x-www-form-urlencoded`},body:n.toString()})}catch{throw Error("Session expired. Run `picked login`.")}if(!r.ok)throw Error("Session expired. Run `picked login`.");let i=await R(r);if(!i)throw Error("Session expired. Run `picked login`.");return{accessToken:i.accessToken,refreshToken:i.refreshToken??e.session.refreshToken,expiresAt:Date.now()+i.expiresIn*1e3,user:e.session.user}}var V=`https://api.picked.app`;async function H(e=process.cwd()){let n=process.env.PICKED_API_URL;if(n)return(0,t.normalizeApiUrl)(n);let r=await(0,t.loadPickedConfig)(e);return(0,t.normalizeApiUrl)(r?.apiUrl??V)}async function U(e){let t=await H(e?.cwd);try{let e=await B(t);await w(t,e);let n=e.user?.email??e.user?.id??`unknown user`;return console.log(`Logged in as ${n} (${t})`),0}catch(e){let t=e instanceof Error?e.message:String(e);return console.error(t),1}}async function W(e){let t=await H(e?.cwd);return await ne(t),console.log(`Logged out of ${t}.`),0}async function G(e){let n=e?.cwd??process.cwd(),r=await(0,t.loadPickedConfig)(n);if(!r)return console.error(`No picked.config.{ts,js,json} found in the current directory.`),1;let i=await H(n);console.log(`API: ${i}`),console.log(`Config default: project ${r.projectId} (source: ${r.source??`published`})`);let a=await(0,t.readActiveSelection)(n,i);if(!a)return console.log(`Active selection: none (using the config default).`),0;if(!a.workspace)return console.log(`Active selection: live (published) in project ${a.projectId}`),0;let{name:o,status:s,source:c}=a.workspace;return console.log(`Active selection: ${o} [${s}] in project ${a.projectId} (source: ${c})`),0}async function K(e){let t=await H(e?.cwd),n=await x(t);if(!n?.session)return console.error(`Not logged in to ${t}. Run \`picked login\`.`),1;let{user:r}=n.session,i=r?.email??r?.id??`unknown user`;return console.log(`${i} (${t})`),0}var q=6e4;async function J(e){let t=await x(e);if(!t?.session)throw Error(`Not logged in to ${e}. Run \`picked login\`.`);if(t.session.expiresAt-Date.now()>q)return t.session.accessToken;let n=await ae(t);return await w(e,n),n.accessToken}var oe=(0,l.graphql)(`
-  query PickedWorkspaces {
-    user {
-      organizations(first: 50) {
-        edges {
-          node {
-            id
-            name
-            slug
-            projects(first: 100) {
-              edges {
-                node {
-                  id
-                  name
-                  liveWorkspace {
-                    id
-                  }
-                  liveWorkspaceVersion {
-                    id
-                  }
-                  workspaces(first: 100) {
-                    edges {
-                      node {
-                        id
-                        name
-                        status
-                      }
-                    }
-                  }
-                }
-              }
-            }
-          }
-        }
-      }
-    }
-  }
-`),se=(0,l.graphql)(`
-  query PickedPreviewToken($id: ID!, $projectId: ID!) {
-    workspace(id: $id, projectId: $projectId) {
-      id
-      name
-      status
-      previewToken
-    }
-  }
-`);async function Y(e,t){let n=await(0,l.createAdminApiClient)({apiUrl:e,token:t}).request(oe,{});if(!n.user)throw Error(`Not authenticated, or no organizations are visible to this account.`);return n.user.organizations.edges.map(e=>{let t=e.node;return{id:t.id,name:t.name,slug:t.slug??``,projects:t.projects.edges.map(e=>{let t=e.node;return{id:t.id,name:t.name,liveWorkspaceId:t.liveWorkspace?.id??null,liveVersionId:t.liveWorkspaceVersion?.id??null,workspaces:t.workspaces.edges.map(e=>({id:e.node.id,name:e.node.name,status:e.node.status}))}})}})}async function X(e,t,n,r){let i=(await(0,l.createAdminApiClient)({apiUrl:e,token:t}).request(se,{id:r,projectId:n})).workspace;if(!i)throw Error(`Workspace "${r}" was not found in project "${n}".`);return{status:i.status,name:i.name,previewToken:i.previewToken}}function ce(e){for(let t of e){console.log(`${t.name} (${t.slug})`);for(let e of t.projects){console.log(`  ${e.name} [${e.id}]`);for(let t of e.workspaces){let n=t.status===`LIVE`||t.id===e.liveWorkspaceId?` (live)`:``;console.log(`    ${t.name} [${t.status}]${n}`)}}}}async function Z(e){try{let t=await H(e?.cwd),n=await Y(t,await J(t));return e?.json?(console.log(JSON.stringify(n,null,2)),0):(ce(n),0)}catch(e){let t=e instanceof Error?e.message:String(e);return console.error(t),1}}function le(e,t){return new Promise(n=>{e.question(t,n)})}async function Q(e,t){if(t.length===0)throw Error(`No choices available to select from.`);let n=(0,u.createInterface)({input:process.stdin,output:process.stderr});process.stderr.write(`${e}\n`),t.forEach((e,t)=>{process.stderr.write(`  ${(t+1).toString()}. ${e.label}\n`)});try{for(;;){let e=await le(n,`Enter a number (1-${t.length.toString()}): `),r=Number.parseInt(e,10),i=Number.isInteger(r)?t[r-1]:void 0;if(i)return i.value;process.stderr.write(`Invalid choice, try again.
-`)}}finally{n.close()}}function $(e,t,n){return{projectId:e,workspace:{id:t,name:n.name,status:n.status,source:`preview`,previewToken:n.previewToken}}}async function ue(e,t,n,r){return r?$(n,r,await X(e,t,n,r)):{projectId:n}}async function de(e,t){let n=await Q(`Select a project`,(await Y(e,t)).flatMap(e=>e.projects.map(t=>({label:`${e.name} / ${t.name}`,value:t})))),r=n.workspaces.map(e=>({label:`${e.name} [${e.status}]`,value:e}));n.liveVersionId&&r.unshift({label:`Published (live version)`,value:null});let i=await Q(`Select a workspace`,r);if(!i)return{projectId:n.id};i.status===`ARCHIVED`&&console.error(`Warning: archived workspaces may fail to load via the delivery API.`);let a=await X(e,t,n.id,i.id);return $(n.id,i.id,a)}function fe(e){if(!e.workspace){console.log(`Active workspace: live (published) in project ${e.projectId}`);return}let{name:t,status:n,source:r}=e.workspace;console.log(`Active workspace: ${t} [${n}] in project ${e.projectId} (source: ${r})`)}async function pe(e){let n=e?.cwd??process.cwd();try{let r=await H(n),i=await J(r),a=e?.project?await ue(r,i,e.project,e.workspace):await de(r,i);return await(0,t.writeActiveSelection)(n,r,a),fe(a),e?.generate!==!1&&await d({cwd:n}),0}catch(e){let t=e instanceof Error?e.message:String(e);return console.error(t),1}}Object.defineProperty(exports,"a",{enumerable:!0,get:function(){return W}}),Object.defineProperty(exports,"i",{enumerable:!0,get:function(){return G}}),Object.defineProperty(exports,"n",{enumerable:!0,get:function(){return Z}}),Object.defineProperty(exports,"o",{enumerable:!0,get:function(){return U}}),Object.defineProperty(exports,"r",{enumerable:!0,get:function(){return K}}),Object.defineProperty(exports,"s",{enumerable:!0,get:function(){return d}}),Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return pe}});

package/dist/workspace-use-Cbz1Bxse.js

@@ -1,521 +0,0 @@
-import { generate as e } from "@picked/typegen";
-import { loadPickedConfig as t, loadResolvedPickedConfig as n, normalizeApiUrl as r, readActiveSelection as i, writeActiveSelection as a } from "@picked/config";
-import { createServer as o } from "node:http";
-import { spawn as s } from "node:child_process";
-import { existsSync as c } from "node:fs";
-import { chmod as l, mkdir as u, readFile as d, rename as f, rm as p, writeFile as m } from "node:fs/promises";
-import { dirname as ee, join as h } from "node:path";
-import { createHash as g, randomBytes as _ } from "node:crypto";
-import { homedir as te } from "node:os";
-import { createAdminApiClient as v, graphql as y } from "@picked/admin-api-client";
-import { createInterface as b } from "node:readline";
-//#region src/commands/generate-types.ts
-async function x(t) {
-	let r = t?.cwd ?? process.cwd(), i = await n(r);
-	if (!i) return console.error("No picked.config.{ts,js,json} found in the current directory."), 1;
-	try {
-		let n = await e({
-			config: i,
-			check: t?.check ?? !1,
-			onWarn: (e) => {
-				console.warn(e);
-			}
-		});
-		return t?.check ? n.changed ? (console.error(`Types are out of date: ${n.typesOutput}`), 1) : (console.log(`Types are up to date (${n.typesOutput}).`), 0) : (console.log(`Generated types at ${n.typesOutput}`), 0);
-	} catch (e) {
-		let t = e instanceof Error ? e.message : String(e);
-		return console.error(t), 1;
-	}
-}
-//#endregion
-//#region src/lib/browser.ts
-function ne(e) {
-	return process.platform === "darwin" ? {
-		command: "open",
-		args: [e]
-	} : process.platform === "win32" ? {
-		command: "cmd",
-		args: [
-			"/c",
-			"start",
-			"\"\"",
-			e
-		]
-	} : {
-		command: "xdg-open",
-		args: [e]
-	};
-}
-function re(e) {
-	let { command: t, args: n } = ne(e);
-	try {
-		let e = s(t, n, {
-			detached: !0,
-			stdio: "ignore"
-		});
-		e.on("error", () => void 0), e.unref();
-	} catch {}
-	return Promise.resolve();
-}
-//#endregion
-//#region src/lib/paths.ts
-var S = 8;
-function C() {
-	return h(te(), ".picked");
-}
-function w(e) {
-	let t = r(e), { hostname: n, port: i } = new URL(t);
-	return `${(i ? `${n}-${i}` : n).replace(/[^a-z0-9.-]/gi, "_")}-${g("sha256").update(t).digest("hex").slice(0, S)}`;
-}
-function T(e) {
-	return h(C(), "auth", `${w(e)}.json`);
-}
-//#endregion
-//#region src/auth/token-store.ts
-var E = 384;
-function ie(e) {
-	return typeof e == "object" && !!e && "clientId" in e && typeof e.clientId == "string" && "redirectUri" in e && typeof e.redirectUri == "string";
-}
-function ae(e) {
-	return !(typeof e != "object" || !e || !("accessToken" in e) || typeof e.accessToken != "string" || !("refreshToken" in e) || typeof e.refreshToken != "string" || !("expiresAt" in e) || typeof e.expiresAt != "number" || "user" in e && e.user !== void 0 && (typeof e.user != "object" || e.user === null));
-}
-function oe(e) {
-	return !(typeof e != "object" || !e || !("apiUrl" in e) || typeof e.apiUrl != "string" || "client" in e && e.client !== void 0 && !ie(e.client) || "session" in e && e.session !== void 0 && !ae(e.session));
-}
-async function D(e) {
-	let t = T(e);
-	if (!c(t)) return null;
-	try {
-		let e = JSON.parse(await d(t, "utf8"));
-		return oe(e) ? e : null;
-	} catch {
-		return null;
-	}
-}
-async function se(e) {
-	let t = T(e.apiUrl);
-	await u(ee(t), { recursive: !0 });
-	let n = `${t}.${process.pid.toString()}.tmp`;
-	await m(n, `${JSON.stringify(e, null, 2)}\n`, {
-		encoding: "utf8",
-		mode: E
-	}), await l(n, E), await f(n, t);
-}
-async function O(e, t) {
-	let n = await D(e);
-	await se({
-		apiUrl: r(e),
-		client: n?.client,
-		session: n?.session,
-		...t
-	});
-}
-async function k(e, t) {
-	await O(e, { client: t });
-}
-async function A(e, t) {
-	await O(e, { session: t });
-}
-async function j(e) {
-	await p(T(e), { force: !0 });
-}
-//#endregion
-//#region src/auth/pkce.ts
-var M = 32, N = 16;
-function P(e) {
-	return e.toString("base64").replaceAll("+", "-").replaceAll("/", "_").replaceAll("=", "");
-}
-function F() {
-	return P(_(M));
-}
-function I(e) {
-	return P(g("sha256").update(e).digest());
-}
-function L() {
-	return P(_(N));
-}
-//#endregion
-//#region src/auth/oauth.ts
-var R = [
-	8976,
-	8977,
-	8988
-], z = 18e4, B = "openid profile email";
-async function V(e) {
-	let t;
-	try {
-		t = await fetch(`${e}/.well-known/oauth-authorization-server`);
-	} catch (e) {
-		let t = e instanceof Error ? e.message : String(e);
-		throw Error(`Failed to reach the Picked OAuth discovery endpoint: ${t}`);
-	}
-	if (!t.ok) throw Error(`OAuth discovery request failed (${t.status.toString()}).`);
-	let n = await t.json();
-	if (typeof n != "object" || !n) throw Error("Malformed OAuth discovery document.");
-	if (!("authorization_endpoint" in n) || typeof n.authorization_endpoint != "string") throw Error("OAuth discovery document is missing authorization_endpoint.");
-	if (!("token_endpoint" in n) || typeof n.token_endpoint != "string") throw Error("OAuth discovery document is missing token_endpoint.");
-	let r = "registration_endpoint" in n && typeof n.registration_endpoint == "string" ? n.registration_endpoint : void 0, i = "code_challenge_methods_supported" in n && Array.isArray(n.code_challenge_methods_supported) ? n.code_challenge_methods_supported.filter((e) => typeof e == "string") : void 0;
-	return {
-		authorizationEndpoint: n.authorization_endpoint,
-		tokenEndpoint: n.token_endpoint,
-		registrationEndpoint: r,
-		codeChallengeMethods: i
-	};
-}
-async function H(e, t, n) {
-	if (!t.registrationEndpoint) throw Error("OAuth client registration is not available for this Picked API.");
-	let r = await fetch(t.registrationEndpoint, {
-		method: "POST",
-		headers: { "content-type": "application/json" },
-		body: JSON.stringify({
-			client_name: "Picked CLI",
-			redirect_uris: [n],
-			grant_types: ["authorization_code", "refresh_token"],
-			response_types: ["code"],
-			token_endpoint_auth_method: "none"
-		})
-	});
-	if (!r.ok) throw Error(`OAuth client registration failed (${r.status.toString()}).`);
-	let i = await r.json();
-	if (typeof i != "object" || !i || !("client_id" in i) || typeof i.client_id != "string") throw Error("OAuth client registration returned an unexpected response.");
-	return await k(e, {
-		clientId: i.client_id,
-		redirectUri: n
-	}), i.client_id;
-}
-async function U(e, t, n) {
-	let r = (await D(e))?.client;
-	return r?.redirectUri === n ? r.clientId : H(e, t, n);
-}
-function W(e, t) {
-	return new Promise((n) => {
-		let r = () => {
-			e.removeListener("error", r), n(!1);
-		};
-		e.once("error", r), e.listen(t, "127.0.0.1", () => {
-			e.removeListener("error", r), n(!0);
-		});
-	});
-}
-async function G(e) {
-	for (let t of R) if (await W(e, t)) return t;
-	throw Error(`No loopback port available for the OAuth callback (tried ${R.join(", ")}).`);
-}
-function K(e, t, n) {
-	return new Promise((r, i) => {
-		let a = () => {
-			clearTimeout(o), process.removeListener("SIGINT", s), e.close();
-		}, o = setTimeout(() => {
-			a(), i(/* @__PURE__ */ Error("Timed out waiting for the browser sign-in to complete."));
-		}, n), s = () => {
-			a(), i(/* @__PURE__ */ Error("Sign-in cancelled."));
-		};
-		process.once("SIGINT", s), e.on("request", (e, n) => {
-			let o = new URL(e.url ?? "/", "http://127.0.0.1");
-			if (o.pathname !== "/callback") {
-				n.writeHead(404), n.end();
-				return;
-			}
-			let s = o.searchParams.get("error");
-			if (s) {
-				n.writeHead(200, { "content-type": "text/html" }), n.end("<html><body>Sign-in failed. You can close this tab.</body></html>"), a(), i(/* @__PURE__ */ Error(`Authorization failed: ${s}`));
-				return;
-			}
-			let c = o.searchParams.get("code"), l = o.searchParams.get("state");
-			if (!c || l !== t) {
-				n.writeHead(400, { "content-type": "text/html" }), n.end("<html><body>Invalid sign-in response. Close this tab and try again.</body></html>"), a(), i(/* @__PURE__ */ Error("Invalid OAuth callback: missing code or state mismatch."));
-				return;
-			}
-			n.writeHead(200, { "content-type": "text/html" }), n.end("<html><body>Signed in. You can close this tab and return to the terminal.</body></html>"), a(), r({ code: c });
-		});
-	});
-}
-async function q(e) {
-	let t;
-	try {
-		t = await e.json();
-	} catch {
-		return null;
-	}
-	if (typeof t != "object" || !t || !("access_token" in t) || typeof t.access_token != "string" || !("expires_in" in t) || typeof t.expires_in != "number") return null;
-	let n = "refresh_token" in t && typeof t.refresh_token == "string" ? t.refresh_token : void 0;
-	return {
-		accessToken: t.access_token,
-		refreshToken: n,
-		expiresIn: t.expires_in
-	};
-}
-function ce(e) {
-	let t = e.split("."), n = t[1];
-	if (t.length !== 3 || !n) return {};
-	try {
-		let e = JSON.parse(Buffer.from(n, "base64url").toString("utf8"));
-		return typeof e != "object" || !e ? {} : {
-			id: "sub" in e && typeof e.sub == "string" ? e.sub : void 0,
-			email: "email" in e && typeof e.email == "string" ? e.email : void 0
-		};
-	} catch {
-		return {};
-	}
-}
-async function le(e) {
-	let t = await V(e), n = o(), r = `http://127.0.0.1:${(await G(n)).toString()}/callback`, i = await U(e, t, r), a = F(), s = I(a), c = L(), l = new URL(t.authorizationEndpoint);
-	l.searchParams.set("response_type", "code"), l.searchParams.set("client_id", i), l.searchParams.set("redirect_uri", r), l.searchParams.set("code_challenge", s), l.searchParams.set("code_challenge_method", "S256"), l.searchParams.set("state", c), l.searchParams.set("scope", B), console.log(`Opening your browser to sign in...\n${l.toString()}`), await re(l.toString());
-	let { code: u } = await K(n, c, z), d = new URLSearchParams({
-		grant_type: "authorization_code",
-		code: u,
-		redirect_uri: r,
-		client_id: i,
-		code_verifier: a
-	}), f = await fetch(t.tokenEndpoint, {
-		method: "POST",
-		headers: { "content-type": "application/x-www-form-urlencoded" },
-		body: d.toString()
-	});
-	if (!f.ok) throw Error(`Token exchange failed (${f.status.toString()}).`);
-	let p = await q(f);
-	if (!p?.refreshToken) throw Error("Token exchange did not return a refresh token.");
-	return {
-		accessToken: p.accessToken,
-		refreshToken: p.refreshToken,
-		expiresAt: Date.now() + p.expiresIn * 1e3,
-		user: ce(p.accessToken)
-	};
-}
-async function ue(e) {
-	if (!e.client || !e.session) throw Error("Session expired. Run `picked login`.");
-	let t = await V(e.apiUrl), n = new URLSearchParams({
-		grant_type: "refresh_token",
-		refresh_token: e.session.refreshToken,
-		client_id: e.client.clientId
-	}), r;
-	try {
-		r = await fetch(t.tokenEndpoint, {
-			method: "POST",
-			headers: { "content-type": "application/x-www-form-urlencoded" },
-			body: n.toString()
-		});
-	} catch {
-		throw Error("Session expired. Run `picked login`.");
-	}
-	if (!r.ok) throw Error("Session expired. Run `picked login`.");
-	let i = await q(r);
-	if (!i) throw Error("Session expired. Run `picked login`.");
-	return {
-		accessToken: i.accessToken,
-		refreshToken: i.refreshToken ?? e.session.refreshToken,
-		expiresAt: Date.now() + i.expiresIn * 1e3,
-		user: e.session.user
-	};
-}
-//#endregion
-//#region src/lib/api-url.ts
-var de = "https://api.picked.app";
-async function J(e = process.cwd()) {
-	let n = process.env.PICKED_API_URL;
-	if (n) return r(n);
-	let i = await t(e);
-	return r(i?.apiUrl ?? de);
-}
-//#endregion
-//#region src/commands/login.ts
-async function fe(e) {
-	let t = await J(e?.cwd);
-	try {
-		let e = await le(t);
-		await A(t, e);
-		let n = e.user?.email ?? e.user?.id ?? "unknown user";
-		return console.log(`Logged in as ${n} (${t})`), 0;
-	} catch (e) {
-		let t = e instanceof Error ? e.message : String(e);
-		return console.error(t), 1;
-	}
-}
-//#endregion
-//#region src/commands/logout.ts
-async function pe(e) {
-	let t = await J(e?.cwd);
-	return await j(t), console.log(`Logged out of ${t}.`), 0;
-}
-//#endregion
-//#region src/commands/status.ts
-async function me(e) {
-	let n = e?.cwd ?? process.cwd(), r = await t(n);
-	if (!r) return console.error("No picked.config.{ts,js,json} found in the current directory."), 1;
-	let a = await J(n);
-	console.log(`API: ${a}`), console.log(`Config default: project ${r.projectId} (source: ${r.source ?? "published"})`);
-	let o = await i(n, a);
-	if (!o) return console.log("Active selection: none (using the config default)."), 0;
-	if (!o.workspace) return console.log(`Active selection: live (published) in project ${o.projectId}`), 0;
-	let { name: s, status: c, source: l } = o.workspace;
-	return console.log(`Active selection: ${s} [${c}] in project ${o.projectId} (source: ${l})`), 0;
-}
-//#endregion
-//#region src/commands/whoami.ts
-async function he(e) {
-	let t = await J(e?.cwd), n = await D(t);
-	if (!n?.session) return console.error(`Not logged in to ${t}. Run \`picked login\`.`), 1;
-	let { user: r } = n.session, i = r?.email ?? r?.id ?? "unknown user";
-	return console.log(`${i} (${t})`), 0;
-}
-//#endregion
-//#region src/auth/session.ts
-var ge = 6e4;
-async function Y(e) {
-	let t = await D(e);
-	if (!t?.session) throw Error(`Not logged in to ${e}. Run \`picked login\`.`);
-	if (t.session.expiresAt - Date.now() > ge) return t.session.accessToken;
-	let n = await ue(t);
-	return await A(e, n), n.accessToken;
-}
-//#endregion
-//#region src/lib/workspaces.ts
-var _e = y("\n  query PickedWorkspaces {\n    user {\n      organizations(first: 50) {\n        edges {\n          node {\n            id\n            name\n            slug\n            projects(first: 100) {\n              edges {\n                node {\n                  id\n                  name\n                  liveWorkspace {\n                    id\n                  }\n                  liveWorkspaceVersion {\n                    id\n                  }\n                  workspaces(first: 100) {\n                    edges {\n                      node {\n                        id\n                        name\n                        status\n                      }\n                    }\n                  }\n                }\n              }\n            }\n          }\n        }\n      }\n    }\n  }\n"), ve = y("\n  query PickedPreviewToken($id: ID!, $projectId: ID!) {\n    workspace(id: $id, projectId: $projectId) {\n      id\n      name\n      status\n      previewToken\n    }\n  }\n");
-async function X(e, t) {
-	let n = await v({
-		apiUrl: e,
-		token: t
-	}).request(_e, {});
-	if (!n.user) throw Error("Not authenticated, or no organizations are visible to this account.");
-	return n.user.organizations.edges.map((e) => {
-		let t = e.node;
-		return {
-			id: t.id,
-			name: t.name,
-			slug: t.slug ?? "",
-			projects: t.projects.edges.map((e) => {
-				let t = e.node;
-				return {
-					id: t.id,
-					name: t.name,
-					liveWorkspaceId: t.liveWorkspace?.id ?? null,
-					liveVersionId: t.liveWorkspaceVersion?.id ?? null,
-					workspaces: t.workspaces.edges.map((e) => ({
-						id: e.node.id,
-						name: e.node.name,
-						status: e.node.status
-					}))
-				};
-			})
-		};
-	});
-}
-async function Z(e, t, n, r) {
-	let i = (await v({
-		apiUrl: e,
-		token: t
-	}).request(ve, {
-		id: r,
-		projectId: n
-	})).workspace;
-	if (!i) throw Error(`Workspace "${r}" was not found in project "${n}".`);
-	return {
-		status: i.status,
-		name: i.name,
-		previewToken: i.previewToken
-	};
-}
-//#endregion
-//#region src/commands/workspace-list.ts
-function ye(e) {
-	for (let t of e) {
-		console.log(`${t.name} (${t.slug})`);
-		for (let e of t.projects) {
-			console.log(`  ${e.name} [${e.id}]`);
-			for (let t of e.workspaces) {
-				let n = t.status === "LIVE" || t.id === e.liveWorkspaceId ? " (live)" : "";
-				console.log(`    ${t.name} [${t.status}]${n}`);
-			}
-		}
-	}
-}
-async function be(e) {
-	try {
-		let t = await J(e?.cwd), n = await X(t, await Y(t));
-		return e?.json ? (console.log(JSON.stringify(n, null, 2)), 0) : (ye(n), 0);
-	} catch (e) {
-		let t = e instanceof Error ? e.message : String(e);
-		return console.error(t), 1;
-	}
-}
-//#endregion
-//#region src/lib/prompt.ts
-function xe(e, t) {
-	return new Promise((n) => {
-		e.question(t, n);
-	});
-}
-async function Q(e, t) {
-	if (t.length === 0) throw Error("No choices available to select from.");
-	let n = b({
-		input: process.stdin,
-		output: process.stderr
-	});
-	process.stderr.write(`${e}\n`), t.forEach((e, t) => {
-		process.stderr.write(`  ${(t + 1).toString()}. ${e.label}\n`);
-	});
-	try {
-		for (;;) {
-			let e = await xe(n, `Enter a number (1-${t.length.toString()}): `), r = Number.parseInt(e, 10), i = Number.isInteger(r) ? t[r - 1] : void 0;
-			if (i) return i.value;
-			process.stderr.write("Invalid choice, try again.\n");
-		}
-	} finally {
-		n.close();
-	}
-}
-//#endregion
-//#region src/commands/workspace-use.ts
-function $(e, t, n) {
-	return {
-		projectId: e,
-		workspace: {
-			id: t,
-			name: n.name,
-			status: n.status,
-			source: "preview",
-			previewToken: n.previewToken
-		}
-	};
-}
-async function Se(e, t, n, r) {
-	return r ? $(n, r, await Z(e, t, n, r)) : { projectId: n };
-}
-async function Ce(e, t) {
-	let n = await Q("Select a project", (await X(e, t)).flatMap((e) => e.projects.map((t) => ({
-		label: `${e.name} / ${t.name}`,
-		value: t
-	})))), r = n.workspaces.map((e) => ({
-		label: `${e.name} [${e.status}]`,
-		value: e
-	}));
-	n.liveVersionId && r.unshift({
-		label: "Published (live version)",
-		value: null
-	});
-	let i = await Q("Select a workspace", r);
-	if (!i) return { projectId: n.id };
-	i.status === "ARCHIVED" && console.error("Warning: archived workspaces may fail to load via the delivery API.");
-	let a = await Z(e, t, n.id, i.id);
-	return $(n.id, i.id, a);
-}
-function we(e) {
-	if (!e.workspace) {
-		console.log(`Active workspace: live (published) in project ${e.projectId}`);
-		return;
-	}
-	let { name: t, status: n, source: r } = e.workspace;
-	console.log(`Active workspace: ${t} [${n}] in project ${e.projectId} (source: ${r})`);
-}
-async function Te(e) {
-	let t = e?.cwd ?? process.cwd();
-	try {
-		let n = await J(t), r = await Y(n), i = e?.project ? await Se(n, r, e.project, e.workspace) : await Ce(n, r);
-		return await a(t, n, i), we(i), e?.generate !== !1 && await x({ cwd: t }), 0;
-	} catch (e) {
-		let t = e instanceof Error ? e.message : String(e);
-		return console.error(t), 1;
-	}
-}
-//#endregion
-export { pe as a, me as i, be as n, fe as o, he as r, x as s, Te as t };