@revos/cli 0.3.0 → 0.3.1

package/dist/adapters/oclif/commands/score-groups/get.mjs

@@ -1,4 +1,4 @@
-import { r as getCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { r as getCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/score-groups/get.ts
 var get_default = getCommand({
 	resource: "scoreGroups",

package/dist/adapters/oclif/commands/score-groups/list.mjs

@@ -1,4 +1,4 @@
-import { i as listCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { i as listCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/score-groups/list.ts
 var list_default = listCommand({
 	resource: "scoreGroups",

package/dist/adapters/oclif/commands/score-groups/update.mjs

@@ -1,4 +1,4 @@
-import { a as updateCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { a as updateCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/score-groups/update.ts
 var update_default = updateCommand({
 	resource: "scoreGroups",

package/dist/adapters/oclif/commands/scores/create.mjs

@@ -1,4 +1,4 @@
-import { t as createCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { t as createCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/scores/create.ts
 var create_default = createCommand({
 	resource: "scores",

package/dist/adapters/oclif/commands/scores/delete.mjs

@@ -1,4 +1,4 @@
-import { n as deleteCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { n as deleteCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/scores/delete.ts
 var delete_default = deleteCommand({
 	resource: "scores",

package/dist/adapters/oclif/commands/scores/list.mjs

@@ -1,4 +1,4 @@
-import { i as listCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { i as listCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/scores/list.ts
 var list_default = listCommand({
 	resource: "scores",

package/dist/adapters/oclif/commands/scores/update.mjs

@@ -1,4 +1,4 @@
-import { a as updateCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { a as updateCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/scores/update.ts
 var update_default = updateCommand({
 	resource: "scores",

package/dist/adapters/oclif/commands/segments/create.mjs

@@ -1,4 +1,4 @@
-import { t as createCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { t as createCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/segments/create.ts
 var create_default = createCommand({
 	resource: "segments",

package/dist/adapters/oclif/commands/segments/delete.mjs

@@ -1,4 +1,4 @@
-import { n as deleteCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { n as deleteCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/segments/delete.ts
 var delete_default = deleteCommand({
 	resource: "segments",

package/dist/adapters/oclif/commands/segments/evaluate.mjs

@@ -1,5 +1,5 @@
-import { x as unwrap } from "../../../../core-DsGA_HuL.mjs";
-import { r as defineApiCommand } from "../../../../factory-eslVs9tN.mjs";
+import { x as unwrap } from "../../../../core-CY9pC37x.mjs";
+import { r as defineApiCommand } from "../../../../factory-DTqayaCF.mjs";
 import { Args } from "@oclif/core";
 //#region src/adapters/oclif/commands/segments/evaluate.ts
 var evaluate_default = defineApiCommand({

package/dist/adapters/oclif/commands/segments/get-evaluation-history.mjs

@@ -1,5 +1,5 @@
-import { x as unwrap } from "../../../../core-DsGA_HuL.mjs";
-import { r as defineApiCommand } from "../../../../factory-eslVs9tN.mjs";
+import { x as unwrap } from "../../../../core-CY9pC37x.mjs";
+import { r as defineApiCommand } from "../../../../factory-DTqayaCF.mjs";
 import { Args } from "@oclif/core";
 //#region src/adapters/oclif/commands/segments/get-evaluation-history.ts
 var get_evaluation_history_default = defineApiCommand({

package/dist/adapters/oclif/commands/segments/get-version.mjs

@@ -1,5 +1,5 @@
-import { x as unwrap } from "../../../../core-DsGA_HuL.mjs";
-import { r as defineApiCommand } from "../../../../factory-eslVs9tN.mjs";
+import { x as unwrap } from "../../../../core-CY9pC37x.mjs";
+import { r as defineApiCommand } from "../../../../factory-DTqayaCF.mjs";
 import { Args } from "@oclif/core";
 //#region src/adapters/oclif/commands/segments/get-version.ts
 var get_version_default = defineApiCommand({

package/dist/adapters/oclif/commands/segments/get.mjs

@@ -1,4 +1,4 @@
-import { r as getCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { r as getCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/segments/get.ts
 var get_default = getCommand({
 	resource: "segments",

package/dist/adapters/oclif/commands/segments/list-versions.mjs

@@ -1,5 +1,5 @@
-import { x as unwrap } from "../../../../core-DsGA_HuL.mjs";
-import { n as createListRender, r as defineApiCommand } from "../../../../factory-eslVs9tN.mjs";
+import { x as unwrap } from "../../../../core-CY9pC37x.mjs";
+import { n as createListRender, r as defineApiCommand } from "../../../../factory-DTqayaCF.mjs";
 import { Args, Flags } from "@oclif/core";
 var list_versions_default = defineApiCommand({
 	description: "List versions of a segment",

package/dist/adapters/oclif/commands/segments/list.mjs

@@ -1,4 +1,4 @@
-import { i as listCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { i as listCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/segments/list.ts
 var list_default = listCommand({
 	resource: "segments",

package/dist/adapters/oclif/commands/segments/restore-version.mjs

@@ -1,5 +1,5 @@
-import { x as unwrap } from "../../../../core-DsGA_HuL.mjs";
-import { r as defineApiCommand } from "../../../../factory-eslVs9tN.mjs";
+import { x as unwrap } from "../../../../core-CY9pC37x.mjs";
+import { r as defineApiCommand } from "../../../../factory-DTqayaCF.mjs";
 import { Args } from "@oclif/core";
 //#region src/adapters/oclif/commands/segments/restore-version.ts
 var restore_version_default = defineApiCommand({

package/dist/adapters/oclif/commands/segments/update.mjs

@@ -1,4 +1,4 @@
-import { a as updateCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { a as updateCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/segments/update.ts
 var update_default = updateCommand({
 	resource: "segments",

package/dist/adapters/oclif/commands/sources/create.mjs

@@ -1,5 +1,5 @@
-import { E as getConfig, S as resolveAppUrl } from "../../../../core-DsGA_HuL.mjs";
-import { t as BaseCommand } from "../../../../base.command-BLken6pU.mjs";
+import { E as getConfig, S as resolveAppUrl } from "../../../../core-CY9pC37x.mjs";
+import { t as BaseCommand } from "../../../../base.command-CnVb4RG6.mjs";
 import chalk from "chalk";
 import open from "open";
 //#region src/adapters/oclif/commands/sources/create.ts

package/dist/adapters/oclif/commands/sources/delete.mjs

@@ -1,4 +1,4 @@
-import { n as deleteCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { n as deleteCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/sources/delete.ts
 var delete_default = deleteCommand({
 	resource: "sources",

package/dist/adapters/oclif/commands/sources/get.mjs

@@ -1,4 +1,4 @@
-import { r as getCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { r as getCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/sources/get.ts
 var get_default = getCommand({
 	resource: "sources",

package/dist/adapters/oclif/commands/sources/list-streams.mjs

@@ -1,5 +1,5 @@
-import { x as unwrap } from "../../../../core-DsGA_HuL.mjs";
-import { n as createListRender, r as defineApiCommand } from "../../../../factory-eslVs9tN.mjs";
+import { x as unwrap } from "../../../../core-CY9pC37x.mjs";
+import { n as createListRender, r as defineApiCommand } from "../../../../factory-DTqayaCF.mjs";
 import { Args, Flags } from "@oclif/core";
 var list_streams_default = defineApiCommand({
 	description: "List streams the source exposes (sync modes, cursor/PK candidates, field paths)",

package/dist/adapters/oclif/commands/sources/list.mjs

@@ -1,4 +1,4 @@
-import { i as listCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { i as listCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/sources/list.ts
 var list_default = listCommand({
 	resource: "sources",

package/dist/adapters/oclif/commands/sources/update.mjs

@@ -1,5 +1,5 @@
-import { E as getConfig, S as resolveAppUrl } from "../../../../core-DsGA_HuL.mjs";
-import { t as BaseCommand } from "../../../../base.command-BLken6pU.mjs";
+import { E as getConfig, S as resolveAppUrl } from "../../../../core-CY9pC37x.mjs";
+import { t as BaseCommand } from "../../../../base.command-CnVb4RG6.mjs";
 import chalk from "chalk";
 import { Args } from "@oclif/core";
 import open from "open";

package/dist/adapters/oclif/commands/status.d.mts

@@ -1,4 +1,4 @@
-import { u as ResourceStatus } from "../../../index-Blr5iiwc.mjs";
+import { u as ResourceStatus } from "../../../index-Cbb9pLt6.mjs";
 import { c as IacError } from "../../../context-D5uelKLe.mjs";
 import { t as BaseCommand } from "../../../base.command-BmddDbHa.mjs";
 import * as _$_oclif_core_interfaces0 from "@oclif/core/interfaces";

package/dist/adapters/oclif/commands/status.mjs

@@ -1,6 +1,6 @@
-import { _ as buildIacRegistry, b as createApiClient, f as describeResources, g as loadResources, v as discoverProject, y as projectRoot } from "../../../core-DsGA_HuL.mjs";
-import { t as BaseCommand } from "../../../base.command-BLken6pU.mjs";
-import { a as resolveColumns, i as renderList } from "../../../factory-eslVs9tN.mjs";
+import { _ as buildIacRegistry, b as createApiClient, f as describeResources, g as loadResources, v as discoverProject, y as projectRoot } from "../../../core-CY9pC37x.mjs";
+import { t as BaseCommand } from "../../../base.command-CnVb4RG6.mjs";
+import { a as resolveColumns, i as renderList } from "../../../factory-DTqayaCF.mjs";
 import { n as renderIacErrors } from "../../../iac-render-BSZZEP0n.mjs";
 import chalk from "chalk";
 import { Args, Flags } from "@oclif/core";

package/dist/adapters/oclif/commands/table-views/create.mjs

@@ -1,4 +1,4 @@
-import { t as createCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { t as createCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/table-views/create.ts
 var create_default = createCommand({
 	resource: "tableViews",

package/dist/adapters/oclif/commands/table-views/delete.mjs

@@ -1,4 +1,4 @@
-import { n as deleteCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { n as deleteCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/table-views/delete.ts
 var delete_default = deleteCommand({
 	resource: "tableViews",

package/dist/adapters/oclif/commands/table-views/list.mjs

@@ -1,4 +1,4 @@
-import { i as listCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { i as listCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/table-views/list.ts
 var list_default = listCommand({
 	resource: "tableViews",

package/dist/adapters/oclif/commands/table-views/update.mjs

@@ -1,4 +1,4 @@
-import { a as updateCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { a as updateCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/table-views/update.ts
 var update_default = updateCommand({
 	resource: "tableViews",

package/dist/adapters/oclif/commands/tables/create.mjs

@@ -1,4 +1,4 @@
-import { t as createCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { t as createCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/tables/create.ts
 var create_default = createCommand({
 	resource: "tables",

package/dist/adapters/oclif/commands/tables/delete.mjs

@@ -1,4 +1,4 @@
-import { n as deleteCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { n as deleteCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/tables/delete.ts
 var delete_default = deleteCommand({
 	resource: "tables",

package/dist/adapters/oclif/commands/tables/get.mjs

@@ -1,4 +1,4 @@
-import { r as getCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { r as getCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/tables/get.ts
 var get_default = getCommand({
 	resource: "tables",

package/dist/adapters/oclif/commands/tables/list.mjs

@@ -1,4 +1,4 @@
-import { i as listCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { i as listCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/tables/list.ts
 var list_default = listCommand({
 	resource: "tables",

package/dist/adapters/oclif/commands/tables/update.mjs

@@ -1,4 +1,4 @@
-import { a as updateCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { a as updateCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/tables/update.ts
 var update_default = updateCommand({
 	resource: "tables",

package/dist/{base.command-BLken6pU.mjs → base.command-CnVb4RG6.mjs}

@@ -1,4 +1,4 @@
-import { P as setAuthConfig, U as ApiError, V as loadCredentials, i as formatEnvMismatchError, l as resolveProjectContext, o as formatProjectOrgFlagError, r as formatCredentialsMismatchWarning, u as validateEnvAgainstProject } from "./core-DsGA_HuL.mjs";
+import { G as ApiError, I as setAuthConfig, U as loadCredentials, i as formatEnvMismatchError, l as resolveProjectContext, o as formatProjectOrgFlagError, r as formatCredentialsMismatchWarning, u as validateEnvAgainstProject } from "./core-CY9pC37x.mjs";
 import { Command, Flags } from "@oclif/core";
 import { makeTable } from "@oclif/table";
 //#region src/adapters/oclif/base.command.ts

package/dist/{core-DsGA_HuL.mjs → core-CY9pC37x.mjs}

@@ -357,8 +357,43 @@ async function refreshAccessToken(refreshToken) {
 	return response.json();
 }
 //#endregion
+//#region src/core/auth/oauth-flow.ts
+const noop = () => {};
+async function performOAuthLogin(opts) {
+	const log = opts.log ?? noop;
+	const server = await startOAuthServer();
+	const redirectUri = `http://localhost:${server.port}/callback`;
+	const pkce = generatePKCEChallenge();
+	const authorizationUrl = buildAuthorizationUrl(redirectUri, pkce);
+	log("Opening browser for authentication...");
+	log("If the browser doesn't open, visit this URL:\n");
+	log(`  ${authorizationUrl}\n`);
+	log("Waiting for authentication... (Press Ctrl+C to cancel)\n");
+	const { default: open } = await import("open");
+	await open(authorizationUrl);
+	const callbackResult = await server.waitForCallback();
+	if (callbackResult.state !== pkce.state) throw new Error("Invalid state parameter. Authentication may have been tampered with.");
+	log("Received authorization code, exchanging for tokens...\n");
+	const tokenResponse = await exchangeCodeForTokens(callbackResult.code, redirectUri, pkce.codeVerifier);
+	const userInfo = await getUserInfo(tokenResponse.access_token);
+	const credentials = tokenResponseToCredentials(tokenResponse, userInfo);
+	const activeAuth = getActiveAuthConfig();
+	credentials.apiUrl = opts.apiUrl;
+	credentials.authUrl = activeAuth.authUrl;
+	credentials.authClientId = activeAuth.authClientId;
+	if (opts.organizationId) credentials.organizationId = opts.organizationId;
+	saveCredentials(credentials);
+	return {
+		credentials,
+		userInfo
+	};
+}
+//#endregion
 //#region src/core/config.ts
 const DEFAULT_API_URL = "https://api.revos.ai";
+function resolveApiUrl() {
+	return process.env.REVOS_API_URL || "https://api.revos.ai";
+}
 async function getStoredAccessToken() {
 	const credentials = loadCredentials();
 	if (!credentials) return null;
@@ -381,7 +416,7 @@ async function getConfig() {
 	const token = process.env.REVOS_TOKEN || await getStoredAccessToken();
 	if (!token) throw new Error("Not authenticated. Run 'revos auth login' or set REVOS_TOKEN environment variable.");
 	return {
-		apiUrl: process.env.REVOS_API_URL || "https://api.revos.ai",
+		apiUrl: resolveApiUrl(),
 		token,
 		organizationId: process.env.REVOS_ORG_ID || getStoredOrganizationId()
 	};
@@ -2473,4 +2508,4 @@ var InitService = class InitService {
 	}
 };
 //#endregion
-export { generatePKCEChallenge as A, isTokenExpired as B, formatError as C, AUTH_ENVS as D, getConfig as E, setAuthEnv as F, saveCredentials as H, tokenResponseToCredentials as I, startOAuthServer as L, getUserInfo as M, refreshAccessToken as N, buildAuthorizationUrl as O, setAuthConfig as P, deleteCredentials as R, resolveAppUrl as S, DEFAULT_API_URL as T, ApiError as U, loadCredentials as V, buildIacRegistry as _, formatInProjectSwitchWarning as a, createApiClient as b, isInsideProject as c, iac_exports as d, describeResources as f, loadResources as g, formatDiffLine as h, formatEnvMismatchError as i, getActiveAuthConfig as j, exchangeCodeForTokens as k, resolveProjectContext as l, apply as m, selectOrganization as n, formatProjectOrgFlagError as o, pull as p, formatCredentialsMismatchWarning as r, renderProjectContextLine as s, InitService as t, validateEnvAgainstProject as u, discoverProject as v, sanitizeFileName as w, unwrap as x, projectRoot as y, getCredentialsPath as z };
+export { buildAuthorizationUrl as A, deleteCredentials as B, formatError as C, resolveApiUrl as D, getConfig as E, refreshAccessToken as F, ApiError as G, isTokenExpired as H, setAuthConfig as I, setAuthEnv as L, generatePKCEChallenge as M, getActiveAuthConfig as N, performOAuthLogin as O, getUserInfo as P, tokenResponseToCredentials as R, resolveAppUrl as S, DEFAULT_API_URL as T, loadCredentials as U, getCredentialsPath as V, saveCredentials as W, buildIacRegistry as _, formatInProjectSwitchWarning as a, createApiClient as b, isInsideProject as c, iac_exports as d, describeResources as f, loadResources as g, formatDiffLine as h, formatEnvMismatchError as i, exchangeCodeForTokens as j, AUTH_ENVS as k, resolveProjectContext as l, apply as m, selectOrganization as n, formatProjectOrgFlagError as o, pull as p, formatCredentialsMismatchWarning as r, renderProjectContextLine as s, InitService as t, validateEnvAgainstProject as u, discoverProject as v, sanitizeFileName as w, unwrap as x, projectRoot as y, startOAuthServer as z };

package/dist/{factory-eslVs9tN.mjs → factory-DTqayaCF.mjs}

@@ -1,5 +1,5 @@
-import { E as getConfig, b as createApiClient } from "./core-DsGA_HuL.mjs";
-import { t as BaseCommand } from "./base.command-BLken6pU.mjs";
+import { E as getConfig, b as createApiClient } from "./core-CY9pC37x.mjs";
+import { t as BaseCommand } from "./base.command-CnVb4RG6.mjs";
 import * as fs from "fs";
 import * as path from "path";
 import chalk from "chalk";

package/dist/{index-Blr5iiwc.d.mts → index-Cbb9pLt6.d.mts}

@@ -25,6 +25,7 @@ declare class ApiError extends Error {
 //#endregion
 //#region src/core/config.d.ts
 declare const DEFAULT_API_URL = "https://api.revos.ai";
+declare function resolveApiUrl(): string;
 declare function getConfig(): Promise<Config>;
 //#endregion
 //#region src/core/auth/credentials-store.d.ts
@@ -78,6 +79,18 @@ declare function getUserInfo(accessToken: string): Promise<ClerkUserInfo>;
 declare function tokenResponseToCredentials(tokenResponse: TokenResponse, userInfo: ClerkUserInfo): StoredCredentials;
 declare function refreshAccessToken(refreshToken: string): Promise<TokenResponse>;
 //#endregion
+//#region src/core/auth/oauth-flow.d.ts
+interface PerformOAuthLoginOptions {
+  apiUrl: string;
+  organizationId?: string;
+  log?: (msg: string) => void;
+}
+interface PerformOAuthLoginResult {
+  credentials: StoredCredentials;
+  userInfo: ClerkUserInfo;
+}
+declare function performOAuthLogin(opts: PerformOAuthLoginOptions): Promise<PerformOAuthLoginResult>;
+//#endregion
 //#region src/core/utils.d.ts
 declare function formatError(error: unknown): string;
 declare function sanitizeFileName(name: string): string;
@@ -590,4 +603,4 @@ declare class InitService {
   private renderTemplate;
 }
 //#endregion
-export { setAuthEnv as A, getConfig as B, buildAuthorizationUrl as C, getUserInfo as D, getActiveAuthConfig as E, getCredentialsPath as F, Config as H, isTokenExpired as I, loadCredentials as L, OAuthServerResult as M, startOAuthServer as N, refreshAccessToken as O, deleteCredentials as P, saveCredentials as R, PKCEChallenge as S, generatePKCEChallenge as T, ApiError as V, formatError as _, formatEnvMismatchError as a, AuthConfig as b, renderProjectContextLine as c, PulledResource as d, AppliedResource as f, resolveAppUrl as g, unwrap as h, formatCredentialsMismatchWarning as i, tokenResponseToCredentials as j, setAuthConfig as k, index_d_exports as l, createApiClient as m, InitResult as n, formatInProjectSwitchWarning as o, ApiClient as p, InitService as r, formatProjectOrgFlagError as s, InitOptions as t, ResourceStatus as u, sanitizeFileName as v, exchangeCodeForTokens as w, AuthEnv as x, AUTH_ENVS as y, DEFAULT_API_URL as z };
+export { getUserInfo as A, loadCredentials as B, AuthConfig as C, exchangeCodeForTokens as D, buildAuthorizationUrl as E, OAuthServerResult as F, ApiError as G, DEFAULT_API_URL as H, startOAuthServer as I, Config as K, deleteCredentials as L, setAuthConfig as M, setAuthEnv as N, generatePKCEChallenge as O, tokenResponseToCredentials as P, getCredentialsPath as R, AUTH_ENVS as S, PKCEChallenge as T, getConfig as U, saveCredentials as V, resolveApiUrl as W, formatError as _, formatEnvMismatchError as a, PerformOAuthLoginResult as b, renderProjectContextLine as c, PulledResource as d, AppliedResource as f, resolveAppUrl as g, unwrap as h, formatCredentialsMismatchWarning as i, refreshAccessToken as j, getActiveAuthConfig as k, index_d_exports as l, createApiClient as m, InitResult as n, formatInProjectSwitchWarning as o, ApiClient as p, InitService as r, formatProjectOrgFlagError as s, InitOptions as t, ResourceStatus as u, sanitizeFileName as v, AuthEnv as w, performOAuthLogin as x, PerformOAuthLoginOptions as y, isTokenExpired as z };

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { A as setAuthEnv, B as getConfig, C as buildAuthorizationUrl, D as getUserInfo, E as getActiveAuthConfig, F as getCredentialsPath, H as Config, I as isTokenExpired, L as loadCredentials, M as OAuthServerResult, N as startOAuthServer, O as refreshAccessToken, P as deleteCredentials, R as saveCredentials, S as PKCEChallenge, T as generatePKCEChallenge, V as ApiError, _ as formatError, a as formatEnvMismatchError, b as AuthConfig, c as renderProjectContextLine, g as resolveAppUrl, h as unwrap, i as formatCredentialsMismatchWarning, j as tokenResponseToCredentials, k as setAuthConfig, l as index_d_exports, m as createApiClient, n as InitResult, o as formatInProjectSwitchWarning, p as ApiClient, r as InitService, s as formatProjectOrgFlagError, t as InitOptions, v as sanitizeFileName, w as exchangeCodeForTokens, x as AuthEnv, y as AUTH_ENVS, z as DEFAULT_API_URL } from "./index-Blr5iiwc.mjs";
+import { A as getUserInfo, B as loadCredentials, C as AuthConfig, D as exchangeCodeForTokens, E as buildAuthorizationUrl, F as OAuthServerResult, G as ApiError, H as DEFAULT_API_URL, I as startOAuthServer, K as Config, L as deleteCredentials, M as setAuthConfig, N as setAuthEnv, O as generatePKCEChallenge, P as tokenResponseToCredentials, R as getCredentialsPath, S as AUTH_ENVS, T as PKCEChallenge, U as getConfig, V as saveCredentials, W as resolveApiUrl, _ as formatError, a as formatEnvMismatchError, b as PerformOAuthLoginResult, c as renderProjectContextLine, g as resolveAppUrl, h as unwrap, i as formatCredentialsMismatchWarning, j as refreshAccessToken, k as getActiveAuthConfig, l as index_d_exports, m as createApiClient, n as InitResult, o as formatInProjectSwitchWarning, p as ApiClient, r as InitService, s as formatProjectOrgFlagError, t as InitOptions, v as sanitizeFileName, w as AuthEnv, x as performOAuthLogin, y as PerformOAuthLoginOptions, z as isTokenExpired } from "./index-Cbb9pLt6.mjs";
 import { a as OrgListResult, c as StoredCredentials, i as OAuthCallbackResult, l as TokenResponse, n as AuthStatusInfo, o as OrgSwitchResult, r as ClerkUserInfo, s as OrganizationInfo, t as AuthResult } from "./types-Bk2Cb5yt.mjs";
 import { a as validateEnvAgainstProject, i as resolveProjectContext, n as ProjectContext, r as isInsideProject, t as EnvMismatch } from "./context-D5uelKLe.mjs";
-export { AUTH_ENVS, ApiClient, ApiError, AuthConfig, AuthEnv, AuthResult, AuthStatusInfo, ClerkUserInfo, Config, DEFAULT_API_URL, EnvMismatch, InitOptions, InitResult, InitService, OAuthCallbackResult, OAuthServerResult, OrgListResult, OrgSwitchResult, OrganizationInfo, PKCEChallenge, ProjectContext, StoredCredentials, TokenResponse, buildAuthorizationUrl, createApiClient, deleteCredentials, exchangeCodeForTokens, formatCredentialsMismatchWarning, formatEnvMismatchError, formatError, formatInProjectSwitchWarning, formatProjectOrgFlagError, generatePKCEChallenge, getActiveAuthConfig, getConfig, getCredentialsPath, getUserInfo, index_d_exports as iac, isInsideProject, isTokenExpired, loadCredentials, refreshAccessToken, renderProjectContextLine, resolveAppUrl, resolveProjectContext, sanitizeFileName, saveCredentials, setAuthConfig, setAuthEnv, startOAuthServer, tokenResponseToCredentials, unwrap, validateEnvAgainstProject };
+export { AUTH_ENVS, ApiClient, ApiError, AuthConfig, AuthEnv, AuthResult, AuthStatusInfo, ClerkUserInfo, Config, DEFAULT_API_URL, EnvMismatch, InitOptions, InitResult, InitService, OAuthCallbackResult, OAuthServerResult, OrgListResult, OrgSwitchResult, OrganizationInfo, PKCEChallenge, PerformOAuthLoginOptions, PerformOAuthLoginResult, ProjectContext, StoredCredentials, TokenResponse, buildAuthorizationUrl, createApiClient, deleteCredentials, exchangeCodeForTokens, formatCredentialsMismatchWarning, formatEnvMismatchError, formatError, formatInProjectSwitchWarning, formatProjectOrgFlagError, generatePKCEChallenge, getActiveAuthConfig, getConfig, getCredentialsPath, getUserInfo, index_d_exports as iac, isInsideProject, isTokenExpired, loadCredentials, performOAuthLogin, refreshAccessToken, renderProjectContextLine, resolveApiUrl, resolveAppUrl, resolveProjectContext, sanitizeFileName, saveCredentials, setAuthConfig, setAuthEnv, startOAuthServer, tokenResponseToCredentials, unwrap, validateEnvAgainstProject };

package/dist/index.mjs

@@ -1,2 +1,2 @@
-import { A as generatePKCEChallenge, B as isTokenExpired, C as formatError, D as AUTH_ENVS, E as getConfig, F as setAuthEnv, H as saveCredentials, I as tokenResponseToCredentials, L as startOAuthServer, M as getUserInfo, N as refreshAccessToken, O as buildAuthorizationUrl, P as setAuthConfig, R as deleteCredentials, S as resolveAppUrl, T as DEFAULT_API_URL, U as ApiError, V as loadCredentials, a as formatInProjectSwitchWarning, b as createApiClient, c as isInsideProject, d as iac_exports, i as formatEnvMismatchError, j as getActiveAuthConfig, k as exchangeCodeForTokens, l as resolveProjectContext, o as formatProjectOrgFlagError, r as formatCredentialsMismatchWarning, s as renderProjectContextLine, t as InitService, u as validateEnvAgainstProject, w as sanitizeFileName, x as unwrap, z as getCredentialsPath } from "./core-DsGA_HuL.mjs";
-export { AUTH_ENVS, ApiError, DEFAULT_API_URL, InitService, buildAuthorizationUrl, createApiClient, deleteCredentials, exchangeCodeForTokens, formatCredentialsMismatchWarning, formatEnvMismatchError, formatError, formatInProjectSwitchWarning, formatProjectOrgFlagError, generatePKCEChallenge, getActiveAuthConfig, getConfig, getCredentialsPath, getUserInfo, iac_exports as iac, isInsideProject, isTokenExpired, loadCredentials, refreshAccessToken, renderProjectContextLine, resolveAppUrl, resolveProjectContext, sanitizeFileName, saveCredentials, setAuthConfig, setAuthEnv, startOAuthServer, tokenResponseToCredentials, unwrap, validateEnvAgainstProject };
+import { A as buildAuthorizationUrl, B as deleteCredentials, C as formatError, D as resolveApiUrl, E as getConfig, F as refreshAccessToken, G as ApiError, H as isTokenExpired, I as setAuthConfig, L as setAuthEnv, M as generatePKCEChallenge, N as getActiveAuthConfig, O as performOAuthLogin, P as getUserInfo, R as tokenResponseToCredentials, S as resolveAppUrl, T as DEFAULT_API_URL, U as loadCredentials, V as getCredentialsPath, W as saveCredentials, a as formatInProjectSwitchWarning, b as createApiClient, c as isInsideProject, d as iac_exports, i as formatEnvMismatchError, j as exchangeCodeForTokens, k as AUTH_ENVS, l as resolveProjectContext, o as formatProjectOrgFlagError, r as formatCredentialsMismatchWarning, s as renderProjectContextLine, t as InitService, u as validateEnvAgainstProject, w as sanitizeFileName, x as unwrap, z as startOAuthServer } from "./core-CY9pC37x.mjs";
+export { AUTH_ENVS, ApiError, DEFAULT_API_URL, InitService, buildAuthorizationUrl, createApiClient, deleteCredentials, exchangeCodeForTokens, formatCredentialsMismatchWarning, formatEnvMismatchError, formatError, formatInProjectSwitchWarning, formatProjectOrgFlagError, generatePKCEChallenge, getActiveAuthConfig, getConfig, getCredentialsPath, getUserInfo, iac_exports as iac, isInsideProject, isTokenExpired, loadCredentials, performOAuthLogin, refreshAccessToken, renderProjectContextLine, resolveApiUrl, resolveAppUrl, resolveProjectContext, sanitizeFileName, saveCredentials, setAuthConfig, setAuthEnv, startOAuthServer, tokenResponseToCredentials, unwrap, validateEnvAgainstProject };

package/dist/{presets-D0AIVsGO.mjs → presets-mJzFGMhG.mjs}

@@ -1,5 +1,5 @@
-import { x as unwrap } from "./core-DsGA_HuL.mjs";
-import { n as createListRender, r as defineApiCommand, t as bodyFlag } from "./factory-eslVs9tN.mjs";
+import { x as unwrap } from "./core-CY9pC37x.mjs";
+import { n as createListRender, r as defineApiCommand, t as bodyFlag } from "./factory-DTqayaCF.mjs";
 import { Args, Flags } from "@oclif/core";
 //#region src/adapters/oclif/presets.ts
 function camelToKebab(s) {

package/dist/templates/.devcontainer/post-start.sh

@@ -11,19 +11,18 @@ set -euo pipefail
 # named volume keeps the activation state across rebuilds, so this script
 # doesn't need to re-activate on every start.
 
-need_login=false
-need_init=false
+need_setup=false
 
 if command -v revos >/dev/null 2>&1; then
   if ! revos auth status --json 2>/dev/null | jq -e '.authenticated' >/dev/null 2>&1; then
-    need_login=true
+    need_setup=true
   fi
   if [ ! -s "$HOME/.revos/<%=projectSlug%>-gsa-creds.json" ]; then
-    need_init=true
+    need_setup=true
   fi
 fi
 
-if $need_login || $need_init; then
+if $need_setup; then
   echo ""
   echo "████████████████████████████████████████████████████████████████████████"
   echo "█                                                                      █"
@@ -31,9 +30,6 @@ if $need_login || $need_init; then
   echo "█                                                                      █"
   echo "█   Open a terminal and run:                                           █"
   echo "█                                                                      █"
-  $need_login && \
-  echo "█       revos auth login                                               █"
-  $need_init && \
   echo "█       revos init                                                     █"
   echo "█                                                                      █"
   echo "████████████████████████████████████████████████████████████████████████"

package/dist/templates/.devcontainer/welcome.sh

@@ -1,27 +1,26 @@
 # RevOS dev-container welcome check. Sourced from ~/.bashrc on every
 # interactive shell. Silent once `revos auth status` is authenticated and
-# the GSA key file is present.
-__revos_need_login=false
-__revos_need_init=false
+# the GSA key file is present. `revos init` handles both — it signs you in
+# via the browser if needed, then provisions the GSA key.
+__revos_need_setup=false
 
 if ! command -v revos >/dev/null 2>&1; then
   return 0
 fi
 if ! revos auth status --json 2>/dev/null | jq -e '.authenticated' >/dev/null 2>&1; then
-  __revos_need_login=true
+  __revos_need_setup=true
 fi
 if [ ! -s "$HOME/.revos/<%=projectSlug%>-gsa-creds.json" ]; then
-  __revos_need_init=true
+  __revos_need_setup=true
 fi
 
-if $__revos_need_login || $__revos_need_init; then
+if $__revos_need_setup; then
   echo ""
   echo "============================================================"
   echo "  Welcome to <%=projectName%> dev container!"
   echo "  To finish setup, run:"
-  $__revos_need_login && echo "      revos auth login"
-  $__revos_need_init  && echo "      revos init"
+  echo "      revos init"
   echo "============================================================"
   echo ""
 fi
-unset __revos_need_login __revos_need_init
+unset __revos_need_setup

package/dist/templates/README.md

@@ -8,14 +8,13 @@ This project is designed to be opened in a Dev Container. All tooling — Python
 
 1. **Open in VS Code** and click **Reopen in Container** when prompted. First open builds the image (~1–2 min); subsequent opens are instant.
 
-2. **One-time setup inside the container.** Open a terminal and run these two commands once:
+2. **One-time setup inside the container.** Open a terminal and run:
 
    ```bash
-   revos auth login    # OAuth flow — browser opens automatically
-   revos init          # provisions the BigQuery service account key
+   revos init    # signs you in via browser (if needed), then provisions the BigQuery service account key
    ```
 
-   `revos init` detects it's running inside an existing project, skips the org prompt and scaffolding, and just fills in the missing GCP key.
+   `revos init` detects it's running inside an existing project, skips the org prompt and scaffolding, and just fills in the missing GCP key. If you aren't authenticated yet, it opens the browser for sign-in first — the org is taken from `revos.yaml`.
 
    **You won't need to repeat this.** Credentials persist in per-project Docker volumes, so every future `Rebuild Container`, restart, or VS Code reopen lands in a fully-authenticated state — the container will print `REVOS DEV CONTAINER — READY` on every start.
 
@@ -76,7 +75,7 @@ Inside the container, ask Claude things like _"create a Connection for our Strip
 
 ## Troubleshooting
 
-- **Container shows `SETUP REQUIRED` banner.** Run `revos auth login` and `revos init` in the container terminal.
+- **Container shows `SETUP REQUIRED` banner.** Run `revos init` in the container terminal — it handles login automatically.
 - **`bq` or `dbt` fails with auth errors.** Container's gcloud is not activated. Rebuild the container, or run `bash .devcontainer/post-start.sh` to re-activate.
 - **Start from a clean slate.** Wipe the per-project Docker volumes from your host:
   ```bash

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@revos/cli",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "RevOS CLI for managing RevOS platform resources",
   "license": "MIT",
   "type": "module",