@revos/cli 0.2.3 → 0.3.1

package/dist/adapters/oclif/commands/init.mjs

@@ -1,9 +1,10 @@
-import { E as getConfig, U as ApiError, t as InitService } from "../../../core-B-IdeRNl.mjs";
+import { D as resolveApiUrl, E as getConfig, G as ApiError, O as performOAuthLogin, U as loadCredentials, l as resolveProjectContext, t as InitService } from "../../../core-CY9pC37x.mjs";
 import { TEMPLATES_DIR } from "../../../templates/index.mjs";
-import { t as BaseCommand } from "../../../base.command-D8taHOFF.mjs";
+import { t as BaseCommand } from "../../../base.command-CnVb4RG6.mjs";
 import * as fs from "fs";
 import * as path from "path";
 import chalk from "chalk";
+import { execFileSync } from "child_process";
 import { Args, Flags } from "@oclif/core";
 import select from "@inquirer/select";
 //#region src/adapters/oclif/commands/init.ts
@@ -33,8 +34,28 @@ var Init = class extends BaseCommand {
 		})
 	};
 	async run() {
-		const { apiUrl, token, organizationId } = await getConfig();
 		const projectDir = this.args.destination ? path.resolve(this.args.destination) : process.cwd();
+		const service = new InitService(TEMPLATES_DIR);
+		const projectCtx = fs.existsSync(projectDir) ? resolveProjectContext({ cwd: projectDir }) : null;
+		if (projectCtx && !this.flags["dry-run"] && !loadCredentials()) {
+			this.log("Not authenticated. Opening browser to sign in...\n");
+			const { userInfo } = await performOAuthLogin({
+				apiUrl: resolveApiUrl(),
+				organizationId: projectCtx.orgId,
+				log: (msg) => this.log(msg)
+			});
+			this.log(chalk.green(`\nAuthenticated as ${userInfo.email || userInfo.sub}`));
+		}
+		const { apiUrl, token, organizationId } = await getConfig();
+		if (projectCtx) {
+			await this.runInProject({
+				apiUrl,
+				token,
+				service,
+				projectCtx
+			});
+			return;
+		}
 		if (fs.existsSync(projectDir) && !isDirEmpty(projectDir) && !this.flags.yes) {
 			if (await select({
 				message: `Directory "${path.basename(projectDir)}" already exists and is not empty. What would you like to do?`,
@@ -50,7 +71,6 @@ var Init = class extends BaseCommand {
 				return;
 			}
 		}
-		const service = new InitService(TEMPLATES_DIR);
 		const org = await service.resolveOrganization(apiUrl, token, organizationId).catch((err) => {
 			const message = err instanceof Error ? err.message : String(err);
 			this.error(message, { exit: 1 });
@@ -102,6 +122,74 @@ var Init = class extends BaseCommand {
 		this.log(`\nNext step: open ${chalk.bold(result.projectDir)} in VS Code and click ${chalk.bold("Reopen in Container")}.`);
 		this.log(`\n${chalk.dim("Tip: once inside the Dev Container, ask Claude to \"load sample data\" if you need example datasets.")}\n`);
 	}
+	async runInProject(args) {
+		const { apiUrl, token, service, projectCtx } = args;
+		const projectSlug = projectCtx.projectFile.metadata.name;
+		const orgId = projectCtx.orgId;
+		if (!projectSlug) this.error(`revos.yaml at ${projectCtx.projectFile.path} is missing metadata.name — required to locate the GCP service account key.`, { exit: 1 });
+		if (this.flags["dry-run"]) {
+			this.log(`\nDetected existing RevOS project at ${chalk.dim(projectCtx.projectPath)}`);
+			this.log(`  Org: ${chalk.bold(orgId)}`);
+			const keyPath = InitService.gcpKeyPath(projectSlug);
+			if (fs.existsSync(keyPath) && fs.statSync(keyPath).size > 0) this.log(chalk.dim("\nNothing to do — GCP service account key already present."));
+			else this.log(`\nWould provision GCP service account key at ${keyPath}`);
+			return;
+		}
+		const org = await service.resolveOrganization(apiUrl, token, orgId).catch((err) => {
+			const message = err instanceof Error ? err.message : String(err);
+			this.error(message, { exit: 1 });
+		});
+		this.log(`\nDetected existing RevOS project at ${chalk.dim(projectCtx.projectPath)}`);
+		this.log(`  Org: ${chalk.bold(org.name)} (${org.id})\n`);
+		const result = await service.ensureGcpKey({
+			apiUrl,
+			token,
+			organization: org,
+			projectSlug
+		}).catch((err) => {
+			if (err instanceof ApiError) {
+				this.log(chalk.red(`\nAPI error: ${err.status} ${err.statusText}`));
+				this.log(chalk.red(`URL: ${err.url}`));
+				this.log(chalk.red(`Body: ${JSON.stringify(err.body, null, 2)}`));
+			}
+			const message = err instanceof Error ? err.message : String(err);
+			this.error(message, { exit: 1 });
+		});
+		if (result.status === "created") {
+			this.log(chalk.green(`Provisioned GCP service account key: ${result.keyPath}`));
+			this.activateGcloudInContainer(result.keyPath);
+		} else this.log(chalk.dim(`Nothing to do — GCP service account key already present at ${result.keyPath}.`));
+	}
+	/**
+	* After provisioning a key inside a Dev Container, the GSA still needs to
+	* be activated in gcloud's local config for `bq`, `dbt`, and direct
+	* `gcloud` commands to work in this shell — postStartCommand already ran
+	* with no key file. We do that activation here, but only inside a
+	* container (detected via /.dockerenv) so we never touch the user's
+	* personal gcloud config on the host.
+	*/
+	activateGcloudInContainer(keyPath) {
+		if (!fs.existsSync("/.dockerenv")) return;
+		try {
+			execFileSync("gcloud", [
+				"auth",
+				"activate-service-account",
+				"--key-file",
+				keyPath
+			], { stdio: "ignore" });
+			const project = process.env.GOOGLE_CLOUD_PROJECT;
+			if (project) execFileSync("gcloud", [
+				"config",
+				"set",
+				"project",
+				project
+			], { stdio: "ignore" });
+			this.log(chalk.green("Activated service account in gcloud."));
+		} catch (err) {
+			const msg = err instanceof Error ? err.message : String(err);
+			this.log(chalk.yellow(`Could not activate gcloud automatically (${msg}). Run manually:\n  gcloud auth activate-service-account --key-file=${keyPath}`));
+		}
+	}
 };
 //#endregion
 export { Init as default };

package/dist/adapters/oclif/commands/org/create.mjs

@@ -1,4 +1,4 @@
-import { t as createCommand } from "../../../../presets-Bb9gwgeh.mjs";
+import { t as createCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/org/create.ts
 var create_default = createCommand({
 	resource: "organizations",

package/dist/adapters/oclif/commands/org/current.mjs

@@ -1,5 +1,5 @@
-import { E as getConfig, V as loadCredentials, b as createApiClient, l as resolveProjectContext, x as unwrap } from "../../../../core-B-IdeRNl.mjs";
-import { t as BaseCommand } from "../../../../base.command-D8taHOFF.mjs";
+import { E as getConfig, U as loadCredentials, b as createApiClient, l as resolveProjectContext, x as unwrap } from "../../../../core-CY9pC37x.mjs";
+import { t as BaseCommand } from "../../../../base.command-CnVb4RG6.mjs";
 import chalk from "chalk";
 //#region src/adapters/oclif/commands/org/current.ts
 var OrgCurrent = class extends BaseCommand {

package/dist/adapters/oclif/commands/org/get.mjs

@@ -1,4 +1,4 @@
-import { r as getCommand } from "../../../../presets-Bb9gwgeh.mjs";
+import { r as getCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/org/get.ts
 var get_default = getCommand({
 	resource: "organizations",

package/dist/adapters/oclif/commands/org/list.mjs

@@ -1,5 +1,5 @@
-import { l as resolveProjectContext, x as unwrap } from "../../../../core-B-IdeRNl.mjs";
-import { a as resolveColumns, i as renderList, r as defineApiCommand } from "../../../../factory-CCcimDhl.mjs";
+import { l as resolveProjectContext, x as unwrap } from "../../../../core-CY9pC37x.mjs";
+import { a as resolveColumns, i as renderList, r as defineApiCommand } from "../../../../factory-DTqayaCF.mjs";
 import chalk from "chalk";
 import { Flags } from "@oclif/core";
 //#region src/adapters/oclif/commands/org/list.ts

package/dist/adapters/oclif/commands/org/switch.mjs

@@ -1,5 +1,5 @@
-import { E as getConfig, H as saveCredentials, V as loadCredentials, a as formatInProjectSwitchWarning, b as createApiClient, l as resolveProjectContext, n as selectOrganization, x as unwrap } from "../../../../core-B-IdeRNl.mjs";
-import { t as BaseCommand } from "../../../../base.command-D8taHOFF.mjs";
+import { E as getConfig, U as loadCredentials, W as saveCredentials, a as formatInProjectSwitchWarning, b as createApiClient, l as resolveProjectContext, n as selectOrganization, x as unwrap } from "../../../../core-CY9pC37x.mjs";
+import { t as BaseCommand } from "../../../../base.command-CnVb4RG6.mjs";
 import * as os from "os";
 import chalk from "chalk";
 import { Args } from "@oclif/core";

package/dist/adapters/oclif/commands/pull.d.mts

@@ -1,4 +1,4 @@
-import { d as PulledResource } from "../../../index-D0ax2I61.mjs";
+import { d as PulledResource } from "../../../index-Cbb9pLt6.mjs";
 import { c as IacError } from "../../../context-D5uelKLe.mjs";
 import { t as BaseCommand } from "../../../base.command-BmddDbHa.mjs";
 import * as _$_oclif_core_interfaces0 from "@oclif/core/interfaces";

package/dist/adapters/oclif/commands/pull.mjs

@@ -1,5 +1,5 @@
-import { E as getConfig, _ as buildIacRegistry, b as createApiClient, p as pull, v as discoverProject, y as projectRoot } from "../../../core-B-IdeRNl.mjs";
-import { t as BaseCommand } from "../../../base.command-D8taHOFF.mjs";
+import { E as getConfig, _ as buildIacRegistry, b as createApiClient, p as pull, v as discoverProject, y as projectRoot } from "../../../core-CY9pC37x.mjs";
+import { t as BaseCommand } from "../../../base.command-CnVb4RG6.mjs";
 import { n as renderIacErrors } from "../../../iac-render-BSZZEP0n.mjs";
 import chalk from "chalk";
 import { Args, Flags } from "@oclif/core";

package/dist/adapters/oclif/commands/score-groups/create.mjs

@@ -1,4 +1,4 @@
-import { t as createCommand } from "../../../../presets-Bb9gwgeh.mjs";
+import { t as createCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/score-groups/create.ts
 var create_default = createCommand({
 	resource: "scoreGroups",

package/dist/adapters/oclif/commands/score-groups/delete.mjs

@@ -1,4 +1,4 @@
-import { n as deleteCommand } from "../../../../presets-Bb9gwgeh.mjs";
+import { n as deleteCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/score-groups/delete.ts
 var delete_default = deleteCommand({
 	resource: "scoreGroups",

package/dist/adapters/oclif/commands/score-groups/get.mjs

@@ -1,4 +1,4 @@
-import { r as getCommand } from "../../../../presets-Bb9gwgeh.mjs";
+import { r as getCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/score-groups/get.ts
 var get_default = getCommand({
 	resource: "scoreGroups",

package/dist/adapters/oclif/commands/score-groups/list.mjs

@@ -1,4 +1,4 @@
-import { i as listCommand } from "../../../../presets-Bb9gwgeh.mjs";
+import { i as listCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/score-groups/list.ts
 var list_default = listCommand({
 	resource: "scoreGroups",

package/dist/adapters/oclif/commands/score-groups/update.mjs

@@ -1,4 +1,4 @@
-import { a as updateCommand } from "../../../../presets-Bb9gwgeh.mjs";
+import { a as updateCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/score-groups/update.ts
 var update_default = updateCommand({
 	resource: "scoreGroups",

package/dist/adapters/oclif/commands/scores/create.mjs

@@ -1,4 +1,4 @@
-import { t as createCommand } from "../../../../presets-Bb9gwgeh.mjs";
+import { t as createCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/scores/create.ts
 var create_default = createCommand({
 	resource: "scores",

package/dist/adapters/oclif/commands/scores/delete.mjs

@@ -1,4 +1,4 @@
-import { n as deleteCommand } from "../../../../presets-Bb9gwgeh.mjs";
+import { n as deleteCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/scores/delete.ts
 var delete_default = deleteCommand({
 	resource: "scores",

package/dist/adapters/oclif/commands/scores/list.mjs

@@ -1,4 +1,4 @@
-import { i as listCommand } from "../../../../presets-Bb9gwgeh.mjs";
+import { i as listCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/scores/list.ts
 var list_default = listCommand({
 	resource: "scores",

package/dist/adapters/oclif/commands/scores/update.mjs

@@ -1,4 +1,4 @@
-import { a as updateCommand } from "../../../../presets-Bb9gwgeh.mjs";
+import { a as updateCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/scores/update.ts
 var update_default = updateCommand({
 	resource: "scores",

package/dist/adapters/oclif/commands/segments/create.mjs

@@ -1,4 +1,4 @@
-import { t as createCommand } from "../../../../presets-Bb9gwgeh.mjs";
+import { t as createCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/segments/create.ts
 var create_default = createCommand({
 	resource: "segments",

package/dist/adapters/oclif/commands/segments/delete.mjs

@@ -1,4 +1,4 @@
-import { n as deleteCommand } from "../../../../presets-Bb9gwgeh.mjs";
+import { n as deleteCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/segments/delete.ts
 var delete_default = deleteCommand({
 	resource: "segments",

package/dist/adapters/oclif/commands/segments/evaluate.mjs

@@ -1,5 +1,5 @@
-import { x as unwrap } from "../../../../core-B-IdeRNl.mjs";
-import { r as defineApiCommand } from "../../../../factory-CCcimDhl.mjs";
+import { x as unwrap } from "../../../../core-CY9pC37x.mjs";
+import { r as defineApiCommand } from "../../../../factory-DTqayaCF.mjs";
 import { Args } from "@oclif/core";
 //#region src/adapters/oclif/commands/segments/evaluate.ts
 var evaluate_default = defineApiCommand({

package/dist/adapters/oclif/commands/segments/get-evaluation-history.mjs

@@ -1,5 +1,5 @@
-import { x as unwrap } from "../../../../core-B-IdeRNl.mjs";
-import { r as defineApiCommand } from "../../../../factory-CCcimDhl.mjs";
+import { x as unwrap } from "../../../../core-CY9pC37x.mjs";
+import { r as defineApiCommand } from "../../../../factory-DTqayaCF.mjs";
 import { Args } from "@oclif/core";
 //#region src/adapters/oclif/commands/segments/get-evaluation-history.ts
 var get_evaluation_history_default = defineApiCommand({

package/dist/adapters/oclif/commands/segments/get-version.mjs

@@ -1,5 +1,5 @@
-import { x as unwrap } from "../../../../core-B-IdeRNl.mjs";
-import { r as defineApiCommand } from "../../../../factory-CCcimDhl.mjs";
+import { x as unwrap } from "../../../../core-CY9pC37x.mjs";
+import { r as defineApiCommand } from "../../../../factory-DTqayaCF.mjs";
 import { Args } from "@oclif/core";
 //#region src/adapters/oclif/commands/segments/get-version.ts
 var get_version_default = defineApiCommand({

package/dist/adapters/oclif/commands/segments/get.mjs

@@ -1,4 +1,4 @@
-import { r as getCommand } from "../../../../presets-Bb9gwgeh.mjs";
+import { r as getCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/segments/get.ts
 var get_default = getCommand({
 	resource: "segments",

package/dist/adapters/oclif/commands/segments/list-versions.mjs

@@ -1,5 +1,5 @@
-import { x as unwrap } from "../../../../core-B-IdeRNl.mjs";
-import { n as createListRender, r as defineApiCommand } from "../../../../factory-CCcimDhl.mjs";
+import { x as unwrap } from "../../../../core-CY9pC37x.mjs";
+import { n as createListRender, r as defineApiCommand } from "../../../../factory-DTqayaCF.mjs";
 import { Args, Flags } from "@oclif/core";
 var list_versions_default = defineApiCommand({
 	description: "List versions of a segment",

package/dist/adapters/oclif/commands/segments/list.mjs

@@ -1,4 +1,4 @@
-import { i as listCommand } from "../../../../presets-Bb9gwgeh.mjs";
+import { i as listCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/segments/list.ts
 var list_default = listCommand({
 	resource: "segments",

package/dist/adapters/oclif/commands/segments/restore-version.mjs

@@ -1,5 +1,5 @@
-import { x as unwrap } from "../../../../core-B-IdeRNl.mjs";
-import { r as defineApiCommand } from "../../../../factory-CCcimDhl.mjs";
+import { x as unwrap } from "../../../../core-CY9pC37x.mjs";
+import { r as defineApiCommand } from "../../../../factory-DTqayaCF.mjs";
 import { Args } from "@oclif/core";
 //#region src/adapters/oclif/commands/segments/restore-version.ts
 var restore_version_default = defineApiCommand({

package/dist/adapters/oclif/commands/segments/update.mjs

@@ -1,4 +1,4 @@
-import { a as updateCommand } from "../../../../presets-Bb9gwgeh.mjs";
+import { a as updateCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/segments/update.ts
 var update_default = updateCommand({
 	resource: "segments",

package/dist/adapters/oclif/commands/sources/create.mjs

@@ -1,5 +1,5 @@
-import { E as getConfig, S as resolveAppUrl } from "../../../../core-B-IdeRNl.mjs";
-import { t as BaseCommand } from "../../../../base.command-D8taHOFF.mjs";
+import { E as getConfig, S as resolveAppUrl } from "../../../../core-CY9pC37x.mjs";
+import { t as BaseCommand } from "../../../../base.command-CnVb4RG6.mjs";
 import chalk from "chalk";
 import open from "open";
 //#region src/adapters/oclif/commands/sources/create.ts

package/dist/adapters/oclif/commands/sources/delete.mjs

@@ -1,4 +1,4 @@
-import { n as deleteCommand } from "../../../../presets-Bb9gwgeh.mjs";
+import { n as deleteCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/sources/delete.ts
 var delete_default = deleteCommand({
 	resource: "sources",

package/dist/adapters/oclif/commands/sources/get.mjs

@@ -1,4 +1,4 @@
-import { r as getCommand } from "../../../../presets-Bb9gwgeh.mjs";
+import { r as getCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/sources/get.ts
 var get_default = getCommand({
 	resource: "sources",

package/dist/adapters/oclif/commands/sources/list-streams.mjs

@@ -1,5 +1,5 @@
-import { x as unwrap } from "../../../../core-B-IdeRNl.mjs";
-import { n as createListRender, r as defineApiCommand } from "../../../../factory-CCcimDhl.mjs";
+import { x as unwrap } from "../../../../core-CY9pC37x.mjs";
+import { n as createListRender, r as defineApiCommand } from "../../../../factory-DTqayaCF.mjs";
 import { Args, Flags } from "@oclif/core";
 var list_streams_default = defineApiCommand({
 	description: "List streams the source exposes (sync modes, cursor/PK candidates, field paths)",

package/dist/adapters/oclif/commands/sources/list.mjs

@@ -1,4 +1,4 @@
-import { i as listCommand } from "../../../../presets-Bb9gwgeh.mjs";
+import { i as listCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/sources/list.ts
 var list_default = listCommand({
 	resource: "sources",

package/dist/adapters/oclif/commands/sources/update.mjs

@@ -1,5 +1,5 @@
-import { E as getConfig, S as resolveAppUrl } from "../../../../core-B-IdeRNl.mjs";
-import { t as BaseCommand } from "../../../../base.command-D8taHOFF.mjs";
+import { E as getConfig, S as resolveAppUrl } from "../../../../core-CY9pC37x.mjs";
+import { t as BaseCommand } from "../../../../base.command-CnVb4RG6.mjs";
 import chalk from "chalk";
 import { Args } from "@oclif/core";
 import open from "open";

package/dist/adapters/oclif/commands/status.d.mts

@@ -1,4 +1,4 @@
-import { u as ResourceStatus } from "../../../index-D0ax2I61.mjs";
+import { u as ResourceStatus } from "../../../index-Cbb9pLt6.mjs";
 import { c as IacError } from "../../../context-D5uelKLe.mjs";
 import { t as BaseCommand } from "../../../base.command-BmddDbHa.mjs";
 import * as _$_oclif_core_interfaces0 from "@oclif/core/interfaces";

package/dist/adapters/oclif/commands/status.mjs

@@ -1,6 +1,6 @@
-import { _ as buildIacRegistry, b as createApiClient, f as describeResources, g as loadResources, v as discoverProject, y as projectRoot } from "../../../core-B-IdeRNl.mjs";
-import { t as BaseCommand } from "../../../base.command-D8taHOFF.mjs";
-import { a as resolveColumns, i as renderList } from "../../../factory-CCcimDhl.mjs";
+import { _ as buildIacRegistry, b as createApiClient, f as describeResources, g as loadResources, v as discoverProject, y as projectRoot } from "../../../core-CY9pC37x.mjs";
+import { t as BaseCommand } from "../../../base.command-CnVb4RG6.mjs";
+import { a as resolveColumns, i as renderList } from "../../../factory-DTqayaCF.mjs";
 import { n as renderIacErrors } from "../../../iac-render-BSZZEP0n.mjs";
 import chalk from "chalk";
 import { Args, Flags } from "@oclif/core";

package/dist/adapters/oclif/commands/table-views/create.mjs

@@ -1,4 +1,4 @@
-import { t as createCommand } from "../../../../presets-Bb9gwgeh.mjs";
+import { t as createCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/table-views/create.ts
 var create_default = createCommand({
 	resource: "tableViews",

package/dist/adapters/oclif/commands/table-views/delete.mjs

@@ -1,4 +1,4 @@
-import { n as deleteCommand } from "../../../../presets-Bb9gwgeh.mjs";
+import { n as deleteCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/table-views/delete.ts
 var delete_default = deleteCommand({
 	resource: "tableViews",

package/dist/adapters/oclif/commands/table-views/list.mjs

@@ -1,4 +1,4 @@
-import { i as listCommand } from "../../../../presets-Bb9gwgeh.mjs";
+import { i as listCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/table-views/list.ts
 var list_default = listCommand({
 	resource: "tableViews",

package/dist/adapters/oclif/commands/table-views/update.mjs

@@ -1,4 +1,4 @@
-import { a as updateCommand } from "../../../../presets-Bb9gwgeh.mjs";
+import { a as updateCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/table-views/update.ts
 var update_default = updateCommand({
 	resource: "tableViews",

package/dist/adapters/oclif/commands/tables/create.mjs

@@ -1,4 +1,4 @@
-import { t as createCommand } from "../../../../presets-Bb9gwgeh.mjs";
+import { t as createCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/tables/create.ts
 var create_default = createCommand({
 	resource: "tables",

package/dist/adapters/oclif/commands/tables/delete.mjs

@@ -1,4 +1,4 @@
-import { n as deleteCommand } from "../../../../presets-Bb9gwgeh.mjs";
+import { n as deleteCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/tables/delete.ts
 var delete_default = deleteCommand({
 	resource: "tables",

package/dist/adapters/oclif/commands/tables/get.mjs

@@ -1,4 +1,4 @@
-import { r as getCommand } from "../../../../presets-Bb9gwgeh.mjs";
+import { r as getCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/tables/get.ts
 var get_default = getCommand({
 	resource: "tables",

package/dist/adapters/oclif/commands/tables/list.mjs

@@ -1,4 +1,4 @@
-import { i as listCommand } from "../../../../presets-Bb9gwgeh.mjs";
+import { i as listCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/tables/list.ts
 var list_default = listCommand({
 	resource: "tables",

package/dist/adapters/oclif/commands/tables/update.mjs

@@ -1,4 +1,4 @@
-import { a as updateCommand } from "../../../../presets-Bb9gwgeh.mjs";
+import { a as updateCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/tables/update.ts
 var update_default = updateCommand({
 	resource: "tables",

package/dist/{base.command-D8taHOFF.mjs → base.command-CnVb4RG6.mjs}

@@ -1,4 +1,4 @@
-import { P as setAuthConfig, U as ApiError, V as loadCredentials, i as formatEnvMismatchError, l as resolveProjectContext, o as formatProjectOrgFlagError, r as formatCredentialsMismatchWarning, u as validateEnvAgainstProject } from "./core-B-IdeRNl.mjs";
+import { G as ApiError, I as setAuthConfig, U as loadCredentials, i as formatEnvMismatchError, l as resolveProjectContext, o as formatProjectOrgFlagError, r as formatCredentialsMismatchWarning, u as validateEnvAgainstProject } from "./core-CY9pC37x.mjs";
 import { Command, Flags } from "@oclif/core";
 import { makeTable } from "@oclif/table";
 //#region src/adapters/oclif/base.command.ts

package/dist/{core-B-IdeRNl.mjs → core-CY9pC37x.mjs}

@@ -357,8 +357,43 @@ async function refreshAccessToken(refreshToken) {
 	return response.json();
 }
 //#endregion
+//#region src/core/auth/oauth-flow.ts
+const noop = () => {};
+async function performOAuthLogin(opts) {
+	const log = opts.log ?? noop;
+	const server = await startOAuthServer();
+	const redirectUri = `http://localhost:${server.port}/callback`;
+	const pkce = generatePKCEChallenge();
+	const authorizationUrl = buildAuthorizationUrl(redirectUri, pkce);
+	log("Opening browser for authentication...");
+	log("If the browser doesn't open, visit this URL:\n");
+	log(`  ${authorizationUrl}\n`);
+	log("Waiting for authentication... (Press Ctrl+C to cancel)\n");
+	const { default: open } = await import("open");
+	await open(authorizationUrl);
+	const callbackResult = await server.waitForCallback();
+	if (callbackResult.state !== pkce.state) throw new Error("Invalid state parameter. Authentication may have been tampered with.");
+	log("Received authorization code, exchanging for tokens...\n");
+	const tokenResponse = await exchangeCodeForTokens(callbackResult.code, redirectUri, pkce.codeVerifier);
+	const userInfo = await getUserInfo(tokenResponse.access_token);
+	const credentials = tokenResponseToCredentials(tokenResponse, userInfo);
+	const activeAuth = getActiveAuthConfig();
+	credentials.apiUrl = opts.apiUrl;
+	credentials.authUrl = activeAuth.authUrl;
+	credentials.authClientId = activeAuth.authClientId;
+	if (opts.organizationId) credentials.organizationId = opts.organizationId;
+	saveCredentials(credentials);
+	return {
+		credentials,
+		userInfo
+	};
+}
+//#endregion
 //#region src/core/config.ts
 const DEFAULT_API_URL = "https://api.revos.ai";
+function resolveApiUrl() {
+	return process.env.REVOS_API_URL || "https://api.revos.ai";
+}
 async function getStoredAccessToken() {
 	const credentials = loadCredentials();
 	if (!credentials) return null;
@@ -381,7 +416,7 @@ async function getConfig() {
 	const token = process.env.REVOS_TOKEN || await getStoredAccessToken();
 	if (!token) throw new Error("Not authenticated. Run 'revos auth login' or set REVOS_TOKEN environment variable.");
 	return {
-		apiUrl: process.env.REVOS_API_URL || "https://api.revos.ai",
+		apiUrl: resolveApiUrl(),
 		token,
 		organizationId: process.env.REVOS_ORG_ID || getStoredOrganizationId()
 	};
@@ -2230,7 +2265,9 @@ var InitService = class InitService {
 		"revos.yaml",
 		".devcontainer/devcontainer.json",
 		".devcontainer/Dockerfile",
-		".devcontainer/setup.sh",
+		".devcontainer/post-create.sh",
+		".devcontainer/post-start.sh",
+		".devcontainer/welcome.sh",
 		".gitignore",
 		"README.md",
 		"dbt/profiles.yml",
@@ -2336,6 +2373,26 @@ var InitService = class InitService {
 		if (!full.bqDataset) throw new Error("Organization is missing BigQuery dataset configuration. Contact support.");
 		return full;
 	}
+	static gcpKeyPath(projectSlug) {
+		return path.join(os.homedir(), ".revos", `${projectSlug}-gsa-creds.json`);
+	}
+	/**
+	* Idempotent GSA provisioning entrypoint for in-project re-runs of
+	* `revos init`. Provisions and writes the key only when the local file is
+	* missing; otherwise reports "exists" without touching the API.
+	*/
+	async ensureGcpKey(options) {
+		const keyPath = InitService.gcpKeyPath(options.projectSlug);
+		if (fs.existsSync(keyPath) && fs.statSync(keyPath).size > 0) return {
+			keyPath,
+			status: "exists"
+		};
+		await this.downloadGcpKey(options.apiUrl, options.token, options.organization, options.projectSlug);
+		return {
+			keyPath,
+			status: "created"
+		};
+	}
 	async downloadGcpKey(apiUrl, token, org, projectSlug) {
 		const api = createApiClient({
 			apiUrl,
@@ -2346,7 +2403,7 @@ var InitService = class InitService {
 		if (!keyId) throw new Error("Service account has no keys");
 		const keyJson = unwrap(await api.gserviceAccountKeys.reveal({ id: keyId }))?.key;
 		if (!keyJson) throw new Error("Service account key is empty");
-		const gcpKeyPath = path.join(os.homedir(), ".revos", `${projectSlug}-gsa-creds.json`);
+		const gcpKeyPath = InitService.gcpKeyPath(projectSlug);
 		fs.mkdirSync(path.dirname(gcpKeyPath), { recursive: true });
 		fs.writeFileSync(gcpKeyPath, keyJson, process.platform !== "win32" ? {
 			encoding: "utf-8",
@@ -2377,10 +2434,16 @@ var InitService = class InitService {
 				organizationId: org.id
 			}),
 			".devcontainer/Dockerfile": this.renderTemplate(".devcontainer/Dockerfile", {}),
-			".devcontainer/setup.sh": this.renderTemplate(".devcontainer/setup.sh", {}),
+			".devcontainer/post-create.sh": this.renderTemplate(".devcontainer/post-create.sh", {}),
+			".devcontainer/post-start.sh": this.renderTemplate(".devcontainer/post-start.sh", { projectSlug }),
+			".devcontainer/welcome.sh": this.renderTemplate(".devcontainer/welcome.sh", {
+				projectName,
+				projectSlug
+			}),
 			".gitignore": this.renderTemplate("gitignore", {}),
 			"README.md": this.renderTemplate("README.md", {
 				projectName,
+				projectSlug,
 				orgName: org.name
 			}),
 			"dbt/profiles.yml": this.renderTemplate("dbt/profiles.yml", { bqLocation: org.bqLocation ?? "europe-west3" }),
@@ -2445,4 +2508,4 @@ var InitService = class InitService {
 	}
 };
 //#endregion
-export { generatePKCEChallenge as A, isTokenExpired as B, formatError as C, AUTH_ENVS as D, getConfig as E, setAuthEnv as F, saveCredentials as H, tokenResponseToCredentials as I, startOAuthServer as L, getUserInfo as M, refreshAccessToken as N, buildAuthorizationUrl as O, setAuthConfig as P, deleteCredentials as R, resolveAppUrl as S, DEFAULT_API_URL as T, ApiError as U, loadCredentials as V, buildIacRegistry as _, formatInProjectSwitchWarning as a, createApiClient as b, isInsideProject as c, iac_exports as d, describeResources as f, loadResources as g, formatDiffLine as h, formatEnvMismatchError as i, getActiveAuthConfig as j, exchangeCodeForTokens as k, resolveProjectContext as l, apply as m, selectOrganization as n, formatProjectOrgFlagError as o, pull as p, formatCredentialsMismatchWarning as r, renderProjectContextLine as s, InitService as t, validateEnvAgainstProject as u, discoverProject as v, sanitizeFileName as w, unwrap as x, projectRoot as y, getCredentialsPath as z };
+export { buildAuthorizationUrl as A, deleteCredentials as B, formatError as C, resolveApiUrl as D, getConfig as E, refreshAccessToken as F, ApiError as G, isTokenExpired as H, setAuthConfig as I, setAuthEnv as L, generatePKCEChallenge as M, getActiveAuthConfig as N, performOAuthLogin as O, getUserInfo as P, tokenResponseToCredentials as R, resolveAppUrl as S, DEFAULT_API_URL as T, loadCredentials as U, getCredentialsPath as V, saveCredentials as W, buildIacRegistry as _, formatInProjectSwitchWarning as a, createApiClient as b, isInsideProject as c, iac_exports as d, describeResources as f, loadResources as g, formatDiffLine as h, formatEnvMismatchError as i, exchangeCodeForTokens as j, AUTH_ENVS as k, resolveProjectContext as l, apply as m, selectOrganization as n, formatProjectOrgFlagError as o, pull as p, formatCredentialsMismatchWarning as r, renderProjectContextLine as s, InitService as t, validateEnvAgainstProject as u, discoverProject as v, sanitizeFileName as w, unwrap as x, projectRoot as y, startOAuthServer as z };

package/dist/{factory-CCcimDhl.mjs → factory-DTqayaCF.mjs}

@@ -1,5 +1,5 @@
-import { E as getConfig, b as createApiClient } from "./core-B-IdeRNl.mjs";
-import { t as BaseCommand } from "./base.command-D8taHOFF.mjs";
+import { E as getConfig, b as createApiClient } from "./core-CY9pC37x.mjs";
+import { t as BaseCommand } from "./base.command-CnVb4RG6.mjs";
 import * as fs from "fs";
 import * as path from "path";
 import chalk from "chalk";