@revos/cli 0.3.0 → 0.3.2

package/README.md

@@ -87,11 +87,11 @@ If the destination already exists and is not empty, you will be prompted to conf
 
 **What it does (in-project — re-run inside an existing `revos.yaml` tree):**
 
-`revos init` becomes idempotent: it skips the org prompt, skips scaffolding (no overwriting of existing files), skips IaC discovery, and only provisions the GCP service account key if `~/.revos/{project-name}-gsa-creds.json` is missing. Useful inside the Dev Container — the named volume starts empty, so after `revos auth login` you run `revos init` to materialize the GSA key. Outside the container, re-running is a safe no-op if everything is already in place.
+`revos init` becomes idempotent: it skips the org prompt, skips scaffolding (no overwriting of existing files), skips IaC discovery, and only provisions the GCP service account key if `~/.revos/{project-name}-gsa-creds.json` is missing. If you aren't authenticated yet, it opens the browser to sign in first — the org is taken from `revos.yaml`, so no picker is shown. Useful inside the Dev Container, where the named credentials volume starts empty: a single `revos init` both signs you in and materializes the GSA key. Outside the container, re-running is a safe no-op if everything is already in place.
 
-**Dev Container onboarding flow:** open project in VS Code → "Reopen in Container" → run `revos auth login` → run `revos init`. Subsequent container starts auto-activate the service account via `postStartCommand`.
+**Dev Container onboarding flow:** open project in VS Code → "Reopen in Container" → run `revos init`. The first run signs you in via the browser and provisions the GSA key. Subsequent container starts auto-activate the service account via `postStartCommand`.
 
-**Requires:** `revos auth login` first (greenfield), or in-container login (in-project).
+**Requires:** `revos auth login` first (greenfield, since the multi-org picker and `--dev` selection live there). In-project init handles login itself.
 
 ---
 
@@ -406,7 +406,7 @@ The CLI exposes every method of `@revos/api-client` as a topic-prefixed command.
 | ----------------------- | ------------------------------------------------------------------------------------------------------------------------------------ |
 | `tables`                | `list`, `get`, `create`, `update`, `delete`                                                                                          |
 | `table-views`           | `list`, `create`, `update`, `delete`                                                                                                 |
-| `cubes`                 | `list`, `get`, `create`, `update`, `delete`                                                                                          |
+| `cubes`                 | `list`, `get`, `create`, `update`, `delete`, `query`, `meta`                                                                         |
 | `connections`           | `list`, `get`, `create`, `update`, `delete`                                                                                          |
 | `scores`                | `list`, `create`, `update`, `delete`                                                                                                 |
 | `score-groups`          | `list`, `get`, `create`, `update`, `delete`                                                                                          |
@@ -463,6 +463,32 @@ revos actions get-params-schema act_789
 revos gservice-account-keys reveal key_abc
 ```
 
+#### Query the semantic model (`cubes query` / `cubes meta`)
+
+`revos cubes meta` lists every cube and view exposed by the org's semantic
+model along with its measures, dimensions, and segments — use it to discover
+the member names you can reference in a query.
+
+`revos cubes query` runs a Cube.js query and prints the resulting rows.
+`--query` accepts inline JSON, `@path/to/file.json`, or `-` to read from
+stdin. The payload may either be a bare query object or wrapped as
+`{ "query": { ... } }`. Rows render as a table by default; pass `--json`
+for the full response payload.
+
+```bash
+revos cubes meta
+revos cubes meta --json | jq '.cubes[0]'
+
+# inline
+revos cubes query --query '{"measures":["Orders.count"]}'
+
+# file
+revos cubes query --query @./query.json --json
+
+# stdin
+echo '{"measures":["Orders.count"],"dimensions":["Orders.status"]}' | revos cubes query
+```
+
 ---
 
 ### Raw API access (`revos api`)

package/dist/adapters/oclif/commands/action-runs/get.mjs

@@ -1,4 +1,4 @@
-import { r as getCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { r as getCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/action-runs/get.ts
 var get_default = getCommand({
 	resource: "actionRuns",

package/dist/adapters/oclif/commands/action-runs/list.mjs

@@ -1,4 +1,4 @@
-import { i as listCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { i as listCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/action-runs/list.ts
 var list_default = listCommand({
 	resource: "actionRuns",

package/dist/adapters/oclif/commands/actions/get-input-schema.mjs

@@ -1,5 +1,5 @@
-import { x as unwrap } from "../../../../core-DsGA_HuL.mjs";
-import { r as defineApiCommand } from "../../../../factory-eslVs9tN.mjs";
+import { x as unwrap } from "../../../../core-CY9pC37x.mjs";
+import { r as defineApiCommand } from "../../../../factory-DTqayaCF.mjs";
 import { Args, Flags } from "@oclif/core";
 //#region src/adapters/oclif/commands/actions/get-input-schema.ts
 var get_input_schema_default = defineApiCommand({

package/dist/adapters/oclif/commands/actions/get-params-schema.mjs

@@ -1,5 +1,5 @@
-import { x as unwrap } from "../../../../core-DsGA_HuL.mjs";
-import { r as defineApiCommand } from "../../../../factory-eslVs9tN.mjs";
+import { x as unwrap } from "../../../../core-CY9pC37x.mjs";
+import { r as defineApiCommand } from "../../../../factory-DTqayaCF.mjs";
 import { Args, Flags } from "@oclif/core";
 //#region src/adapters/oclif/commands/actions/get-params-schema.ts
 var get_params_schema_default = defineApiCommand({

package/dist/adapters/oclif/commands/actions/get.mjs

@@ -1,4 +1,4 @@
-import { r as getCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { r as getCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/actions/get.ts
 var get_default = getCommand({
 	resource: "actions",

package/dist/adapters/oclif/commands/actions/list.mjs

@@ -1,5 +1,5 @@
-import { x as unwrap } from "../../../../core-DsGA_HuL.mjs";
-import { n as createListRender, r as defineApiCommand } from "../../../../factory-eslVs9tN.mjs";
+import { x as unwrap } from "../../../../core-CY9pC37x.mjs";
+import { n as createListRender, r as defineApiCommand } from "../../../../factory-DTqayaCF.mjs";
 import { Flags } from "@oclif/core";
 var list_default = defineApiCommand({
 	description: "List available actions",

package/dist/adapters/oclif/commands/ai-instructions/create.mjs

@@ -1,4 +1,4 @@
-import { t as createCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { t as createCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/ai-instructions/create.ts
 var create_default = createCommand({
 	resource: "aiInstructions",

package/dist/adapters/oclif/commands/ai-instructions/delete.mjs

@@ -1,4 +1,4 @@
-import { n as deleteCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { n as deleteCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/ai-instructions/delete.ts
 var delete_default = deleteCommand({
 	resource: "aiInstructions",

package/dist/adapters/oclif/commands/ai-instructions/get.mjs

@@ -1,4 +1,4 @@
-import { r as getCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { r as getCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/ai-instructions/get.ts
 var get_default = getCommand({
 	resource: "aiInstructions",

package/dist/adapters/oclif/commands/ai-instructions/list.mjs

@@ -1,4 +1,4 @@
-import { i as listCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { i as listCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/ai-instructions/list.ts
 var list_default = listCommand({
 	resource: "aiInstructions",

package/dist/adapters/oclif/commands/ai-instructions/update.mjs

@@ -1,4 +1,4 @@
-import { a as updateCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { a as updateCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/ai-instructions/update.ts
 var update_default = updateCommand({
 	resource: "aiInstructions",

package/dist/adapters/oclif/commands/api.mjs

@@ -1,5 +1,5 @@
-import { U as ApiError } from "../../../core-DsGA_HuL.mjs";
-import { r as defineApiCommand, t as bodyFlag } from "../../../factory-eslVs9tN.mjs";
+import { G as ApiError } from "../../../core-CY9pC37x.mjs";
+import { r as defineApiCommand, t as bodyFlag } from "../../../factory-DTqayaCF.mjs";
 import { client } from "@revos/api-client";
 import { Args, Flags } from "@oclif/core";
 //#region src/adapters/oclif/commands/api.ts

package/dist/adapters/oclif/commands/apply.d.mts

@@ -1,4 +1,4 @@
-import { f as AppliedResource } from "../../../index-Blr5iiwc.mjs";
+import { f as AppliedResource } from "../../../index-Cbb9pLt6.mjs";
 import { c as IacError } from "../../../context-D5uelKLe.mjs";
 import { t as BaseCommand } from "../../../base.command-BmddDbHa.mjs";
 import * as _$_oclif_core_interfaces0 from "@oclif/core/interfaces";

package/dist/adapters/oclif/commands/apply.mjs

@@ -1,5 +1,5 @@
-import { E as getConfig, _ as buildIacRegistry, b as createApiClient, m as apply, v as discoverProject, y as projectRoot } from "../../../core-DsGA_HuL.mjs";
-import { t as BaseCommand } from "../../../base.command-BLken6pU.mjs";
+import { E as getConfig, _ as buildIacRegistry, b as createApiClient, m as apply, v as discoverProject, y as projectRoot } from "../../../core-CY9pC37x.mjs";
+import { t as BaseCommand } from "../../../base.command-CnVb4RG6.mjs";
 import { n as renderIacErrors, t as APPLY_ACTION_LABELS } from "../../../iac-render-BSZZEP0n.mjs";
 import chalk from "chalk";
 import { Args, Flags } from "@oclif/core";

package/dist/adapters/oclif/commands/auth/login.mjs

@@ -1,8 +1,7 @@
-import { A as generatePKCEChallenge, D as AUTH_ENVS, F as setAuthEnv, H as saveCredentials, I as tokenResponseToCredentials, L as startOAuthServer, M as getUserInfo, O as buildAuthorizationUrl, P as setAuthConfig, b as createApiClient, j as getActiveAuthConfig, k as exchangeCodeForTokens, l as resolveProjectContext, n as selectOrganization, x as unwrap, z as getCredentialsPath } from "../../../../core-DsGA_HuL.mjs";
-import { t as BaseCommand } from "../../../../base.command-BLken6pU.mjs";
+import { D as resolveApiUrl, I as setAuthConfig, L as setAuthEnv, O as performOAuthLogin, V as getCredentialsPath, W as saveCredentials, b as createApiClient, k as AUTH_ENVS, l as resolveProjectContext, n as selectOrganization, x as unwrap } from "../../../../core-CY9pC37x.mjs";
+import { t as BaseCommand } from "../../../../base.command-CnVb4RG6.mjs";
 import chalk from "chalk";
 import { Flags } from "@oclif/core";
-import open from "open";
 //#region src/adapters/oclif/commands/auth/login.ts
 var AuthLogin = class extends BaseCommand {
 	static projectContextMode = "relaxed";
@@ -24,42 +23,23 @@ var AuthLogin = class extends BaseCommand {
 			authClientId: flags["auth-client-id"]
 		});
 		if (!this.jsonEnabled()) this.log("Starting authentication...\n");
-		const server = await startOAuthServer();
-		const redirectUri = `http://localhost:${server.port}/callback`;
-		const pkce = generatePKCEChallenge();
-		const authorizationUrl = buildAuthorizationUrl(redirectUri, pkce);
-		if (!this.jsonEnabled()) {
-			this.log("Opening browser for authentication...");
-			this.log("If the browser doesn't open, visit this URL:\n");
-			this.log(`  ${authorizationUrl}\n`);
-			this.log("Waiting for authentication... (Press Ctrl+C to cancel)\n");
-		}
-		await open(authorizationUrl);
-		const callbackResult = await server.waitForCallback();
-		if (callbackResult.state !== pkce.state) throw new Error("Invalid state parameter. Authentication may have been tampered with.");
-		if (!this.jsonEnabled()) this.log("Received authorization code, exchanging for tokens...\n");
-		const tokenResponse = await exchangeCodeForTokens(callbackResult.code, redirectUri, pkce.codeVerifier);
-		const userInfo = await getUserInfo(tokenResponse.access_token);
-		const credentials = tokenResponseToCredentials(tokenResponse, userInfo);
-		const apiUrl = apiUrlOverride ?? process.env.REVOS_API_URL ?? "https://api.revos.ai";
-		const activeAuth = getActiveAuthConfig();
-		credentials.apiUrl = apiUrl;
-		credentials.authUrl = activeAuth.authUrl;
-		credentials.authClientId = activeAuth.authClientId;
-		saveCredentials(credentials);
+		const apiUrl = apiUrlOverride ?? resolveApiUrl();
+		const projectCtx = resolveProjectContext();
+		const { credentials, userInfo } = await performOAuthLogin({
+			apiUrl,
+			organizationId: projectCtx?.orgId,
+			log: this.jsonEnabled() ? void 0 : (msg) => this.log(msg)
+		});
 		if (!this.jsonEnabled()) {
 			this.log(chalk.green(`\nAuthenticated as ${userInfo.email || userInfo.sub}`));
 			this.log(`\nCredentials saved to ${getCredentialsPath()}`);
 		}
-		const projectCtx = resolveProjectContext();
 		if (projectCtx) {
-			credentials.organizationId = projectCtx.orgId;
-			saveCredentials(credentials);
 			if (!this.jsonEnabled()) this.log(chalk.green(`\nUsing organization from revos.yaml: ${projectCtx.orgId}`));
 		} else try {
 			const orgs = unwrap(await createApiClient({
 				apiUrl,
-				token: tokenResponse.access_token
+				token: credentials.accessToken
 			}).organizations.list());
 			if (orgs.length === 1) {
 				credentials.organizationId = orgs[0].id;

package/dist/adapters/oclif/commands/auth/logout.mjs

@@ -1,5 +1,5 @@
-import { R as deleteCredentials } from "../../../../core-DsGA_HuL.mjs";
-import { t as BaseCommand } from "../../../../base.command-BLken6pU.mjs";
+import { B as deleteCredentials } from "../../../../core-CY9pC37x.mjs";
+import { t as BaseCommand } from "../../../../base.command-CnVb4RG6.mjs";
 import * as os from "os";
 //#region src/adapters/oclif/commands/auth/logout.ts
 var AuthLogout = class extends BaseCommand {

package/dist/adapters/oclif/commands/auth/status.mjs

@@ -1,5 +1,5 @@
-import { B as isTokenExpired, V as loadCredentials, l as resolveProjectContext, z as getCredentialsPath } from "../../../../core-DsGA_HuL.mjs";
-import { t as BaseCommand } from "../../../../base.command-BLken6pU.mjs";
+import { H as isTokenExpired, U as loadCredentials, V as getCredentialsPath, l as resolveProjectContext } from "../../../../core-CY9pC37x.mjs";
+import { t as BaseCommand } from "../../../../base.command-CnVb4RG6.mjs";
 import chalk from "chalk";
 //#region src/adapters/oclif/commands/auth/status.ts
 var AuthStatus = class extends BaseCommand {

package/dist/adapters/oclif/commands/connections/create.mjs

@@ -1,4 +1,4 @@
-import { t as createCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { t as createCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/connections/create.ts
 var create_default = createCommand({
 	resource: "connections",

package/dist/adapters/oclif/commands/connections/delete.mjs

@@ -1,4 +1,4 @@
-import { n as deleteCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { n as deleteCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/connections/delete.ts
 var delete_default = deleteCommand({
 	resource: "connections",

package/dist/adapters/oclif/commands/connections/get.mjs

@@ -1,4 +1,4 @@
-import { r as getCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { r as getCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/connections/get.ts
 var get_default = getCommand({
 	resource: "connections",

package/dist/adapters/oclif/commands/connections/list.mjs

@@ -1,4 +1,4 @@
-import { i as listCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { i as listCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/connections/list.ts
 var list_default = listCommand({
 	resource: "connections",

package/dist/adapters/oclif/commands/connections/update.mjs

@@ -1,4 +1,4 @@
-import { a as updateCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { a as updateCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/connections/update.ts
 var update_default = updateCommand({
 	resource: "connections",

package/dist/adapters/oclif/commands/cubes/create.mjs

@@ -1,4 +1,4 @@
-import { t as createCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { t as createCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/cubes/create.ts
 var create_default = createCommand({
 	resource: "cubes",

package/dist/adapters/oclif/commands/cubes/delete.mjs

@@ -1,4 +1,4 @@
-import { n as deleteCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { n as deleteCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/cubes/delete.ts
 var delete_default = deleteCommand({
 	resource: "cubes",

package/dist/adapters/oclif/commands/cubes/get.mjs

@@ -1,4 +1,4 @@
-import { r as getCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { r as getCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/cubes/get.ts
 var get_default = getCommand({
 	resource: "cubes",

package/dist/adapters/oclif/commands/cubes/list.mjs

@@ -1,4 +1,4 @@
-import { i as listCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { i as listCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/cubes/list.ts
 var list_default = listCommand({
 	resource: "cubes",

package/dist/adapters/oclif/commands/cubes/meta.d.mts

@@ -0,0 +1,6 @@
+import * as _$_oclif_core0 from "@oclif/core";
+
+//#region src/adapters/oclif/commands/cubes/meta.d.ts
+declare const _default: typeof _$_oclif_core0.Command;
+//#endregion
+export { _default as default };

package/dist/adapters/oclif/commands/cubes/meta.mjs

@@ -0,0 +1,45 @@
+import { x as unwrap } from "../../../../core-CY9pC37x.mjs";
+import { r as defineApiCommand } from "../../../../factory-DTqayaCF.mjs";
+import chalk from "chalk";
+//#region src/adapters/oclif/commands/cubes/meta.ts
+var meta_default = defineApiCommand({
+	description: "List cubes and views in the semantic model with their measures, dimensions, and segments.",
+	examples: ["<%= config.bin %> <%= command.id %>", "<%= config.bin %> <%= command.id %> --json"],
+	call: async ({ api }) => {
+		return unwrap(await api.cubes.meta());
+	},
+	render: (data, command) => {
+		const cubes = data?.cubes ?? [];
+		if (cubes.length === 0) {
+			command.log("(no cubes)");
+			return;
+		}
+		for (const cube of cubes) {
+			const heading = cube.title ? `${cube.name} — ${cube.title}` : cube.name;
+			command.log(chalk.bold(heading));
+			const members = [
+				...(cube.measures ?? []).map((m) => ({
+					kind: "measure",
+					...m
+				})),
+				...(cube.dimensions ?? []).map((m) => ({
+					kind: "dimension",
+					...m
+				})),
+				...(cube.segments ?? []).map((m) => ({
+					kind: "segment",
+					...m
+				}))
+			];
+			if (members.length === 0) command.log("  (no members)");
+			else for (const m of members) {
+				const suffix = m.type ? ` :${m.type}` : "";
+				const title = m.title ? `  ${chalk.dim(m.title)}` : "";
+				command.log(`  ${chalk.gray(m.kind.padEnd(9))} ${m.name}${suffix}${title}`);
+			}
+			command.log("");
+		}
+	}
+});
+//#endregion
+export { meta_default as default };

package/dist/adapters/oclif/commands/cubes/query.d.mts

@@ -0,0 +1,6 @@
+import * as _$_oclif_core0 from "@oclif/core";
+
+//#region src/adapters/oclif/commands/cubes/query.d.ts
+declare const _default: typeof _$_oclif_core0.Command;
+//#endregion
+export { _default as default };

package/dist/adapters/oclif/commands/cubes/query.mjs

@@ -0,0 +1,51 @@
+import { x as unwrap } from "../../../../core-CY9pC37x.mjs";
+import { i as renderList, r as defineApiCommand } from "../../../../factory-DTqayaCF.mjs";
+import * as fs from "fs";
+import * as path from "path";
+import { Flags } from "@oclif/core";
+//#region src/adapters/oclif/commands/cubes/query.ts
+var query_default = defineApiCommand({
+	description: "Run a Cube.js query against the semantic model and print the resulting rows.",
+	examples: [
+		"<%= config.bin %> <%= command.id %> --query '{\"measures\":[\"Orders.count\"]}'",
+		"<%= config.bin %> <%= command.id %> --query @./query.json --json",
+		"echo '{\"measures\":[\"Orders.count\"]}' | <%= config.bin %> <%= command.id %>"
+	],
+	flags: { query: Flags.string({
+		description: "Cube.js query. Inline JSON, '@path' to read from a file, or '-' / omitted to read from stdin.",
+		helpValue: "JSON|@file|-"
+	}) },
+	call: async ({ api, flags }) => {
+		const parsed = parseQueryJson(await readQueryInput(flags.query));
+		const query = typeof parsed === "object" && parsed !== null && "query" in parsed ? parsed.query : parsed;
+		return unwrap(await api.cubes.query({ body: { query } }));
+	},
+	render: (data, command) => {
+		renderList(command, data ?? []);
+	}
+});
+async function readQueryInput(flagValue) {
+	if (flagValue === void 0 || flagValue === "-") {
+		if (process.stdin.isTTY && flagValue !== "-") throw new Error("--query is required (inline JSON, '@path' for file, or '-' for stdin)");
+		return readStdin();
+	}
+	if (flagValue.startsWith("@")) {
+		const filePath = path.resolve(process.cwd(), flagValue.slice(1));
+		return fs.readFileSync(filePath, "utf8");
+	}
+	return flagValue;
+}
+function parseQueryJson(raw) {
+	try {
+		return JSON.parse(raw);
+	} catch (err) {
+		throw new Error(`--query is not valid JSON: ${err.message}`, { cause: err });
+	}
+}
+async function readStdin() {
+	const chunks = [];
+	for await (const chunk of process.stdin) chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+	return Buffer.concat(chunks).toString("utf8");
+}
+//#endregion
+export { query_default as default };

package/dist/adapters/oclif/commands/cubes/update.mjs

@@ -1,4 +1,4 @@
-import { a as updateCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { a as updateCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/cubes/update.ts
 var update_default = updateCommand({
 	resource: "cubes",

package/dist/adapters/oclif/commands/diff.d.mts

@@ -1,4 +1,4 @@
-import { f as AppliedResource } from "../../../index-Blr5iiwc.mjs";
+import { f as AppliedResource } from "../../../index-Cbb9pLt6.mjs";
 import { c as IacError } from "../../../context-D5uelKLe.mjs";
 import { t as BaseCommand } from "../../../base.command-BmddDbHa.mjs";
 import * as _$_oclif_core_interfaces0 from "@oclif/core/interfaces";

package/dist/adapters/oclif/commands/diff.mjs

@@ -1,5 +1,5 @@
-import { E as getConfig, _ as buildIacRegistry, b as createApiClient, h as formatDiffLine, m as apply, v as discoverProject, y as projectRoot } from "../../../core-DsGA_HuL.mjs";
-import { t as BaseCommand } from "../../../base.command-BLken6pU.mjs";
+import { E as getConfig, _ as buildIacRegistry, b as createApiClient, h as formatDiffLine, m as apply, v as discoverProject, y as projectRoot } from "../../../core-CY9pC37x.mjs";
+import { t as BaseCommand } from "../../../base.command-CnVb4RG6.mjs";
 import { n as renderIacErrors, t as APPLY_ACTION_LABELS } from "../../../iac-render-BSZZEP0n.mjs";
 import chalk from "chalk";
 import { Args, Flags } from "@oclif/core";

package/dist/adapters/oclif/commands/gservice-account-keys/get.mjs

@@ -1,4 +1,4 @@
-import { r as getCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { r as getCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/gservice-account-keys/get.ts
 var get_default = getCommand({
 	resource: "gserviceAccountKeys",

package/dist/adapters/oclif/commands/gservice-account-keys/reveal.mjs

@@ -1,5 +1,5 @@
-import { x as unwrap } from "../../../../core-DsGA_HuL.mjs";
-import { r as defineApiCommand } from "../../../../factory-eslVs9tN.mjs";
+import { x as unwrap } from "../../../../core-CY9pC37x.mjs";
+import { r as defineApiCommand } from "../../../../factory-DTqayaCF.mjs";
 import { Args } from "@oclif/core";
 //#region src/adapters/oclif/commands/gservice-account-keys/reveal.ts
 var reveal_default = defineApiCommand({

package/dist/adapters/oclif/commands/gservice-accounts/create.mjs

@@ -1,4 +1,4 @@
-import { t as createCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { t as createCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/gservice-accounts/create.ts
 var create_default = createCommand({
 	resource: "gserviceAccounts",

package/dist/adapters/oclif/commands/gservice-accounts/delete.mjs

@@ -1,4 +1,4 @@
-import { n as deleteCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { n as deleteCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/gservice-accounts/delete.ts
 var delete_default = deleteCommand({
 	resource: "gserviceAccounts",

package/dist/adapters/oclif/commands/gservice-accounts/get.mjs

@@ -1,4 +1,4 @@
-import { r as getCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { r as getCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/gservice-accounts/get.ts
 var get_default = getCommand({
 	resource: "gserviceAccounts",

package/dist/adapters/oclif/commands/gservice-accounts/list.mjs

@@ -1,4 +1,4 @@
-import { i as listCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { i as listCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/gservice-accounts/list.ts
 var list_default = listCommand({
 	resource: "gserviceAccounts",

package/dist/adapters/oclif/commands/init.mjs

@@ -1,6 +1,6 @@
-import { E as getConfig, U as ApiError, l as resolveProjectContext, t as InitService } from "../../../core-DsGA_HuL.mjs";
+import { D as resolveApiUrl, E as getConfig, G as ApiError, O as performOAuthLogin, U as loadCredentials, l as resolveProjectContext, t as InitService } from "../../../core-CY9pC37x.mjs";
 import { TEMPLATES_DIR } from "../../../templates/index.mjs";
-import { t as BaseCommand } from "../../../base.command-BLken6pU.mjs";
+import { t as BaseCommand } from "../../../base.command-CnVb4RG6.mjs";
 import * as fs from "fs";
 import * as path from "path";
 import chalk from "chalk";
@@ -34,10 +34,19 @@ var Init = class extends BaseCommand {
 		})
 	};
 	async run() {
-		const { apiUrl, token, organizationId } = await getConfig();
 		const projectDir = this.args.destination ? path.resolve(this.args.destination) : process.cwd();
 		const service = new InitService(TEMPLATES_DIR);
 		const projectCtx = fs.existsSync(projectDir) ? resolveProjectContext({ cwd: projectDir }) : null;
+		if (projectCtx && !this.flags["dry-run"] && !loadCredentials()) {
+			this.log("Not authenticated. Opening browser to sign in...\n");
+			const { userInfo } = await performOAuthLogin({
+				apiUrl: resolveApiUrl(),
+				organizationId: projectCtx.orgId,
+				log: (msg) => this.log(msg)
+			});
+			this.log(chalk.green(`\nAuthenticated as ${userInfo.email || userInfo.sub}`));
+		}
+		const { apiUrl, token, organizationId } = await getConfig();
 		if (projectCtx) {
 			await this.runInProject({
 				apiUrl,

package/dist/adapters/oclif/commands/org/create.mjs

@@ -1,4 +1,4 @@
-import { t as createCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { t as createCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/org/create.ts
 var create_default = createCommand({
 	resource: "organizations",

package/dist/adapters/oclif/commands/org/current.mjs

@@ -1,5 +1,5 @@
-import { E as getConfig, V as loadCredentials, b as createApiClient, l as resolveProjectContext, x as unwrap } from "../../../../core-DsGA_HuL.mjs";
-import { t as BaseCommand } from "../../../../base.command-BLken6pU.mjs";
+import { E as getConfig, U as loadCredentials, b as createApiClient, l as resolveProjectContext, x as unwrap } from "../../../../core-CY9pC37x.mjs";
+import { t as BaseCommand } from "../../../../base.command-CnVb4RG6.mjs";
 import chalk from "chalk";
 //#region src/adapters/oclif/commands/org/current.ts
 var OrgCurrent = class extends BaseCommand {

package/dist/adapters/oclif/commands/org/get.mjs

@@ -1,4 +1,4 @@
-import { r as getCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { r as getCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/org/get.ts
 var get_default = getCommand({
 	resource: "organizations",

package/dist/adapters/oclif/commands/org/list.mjs

@@ -1,5 +1,5 @@
-import { l as resolveProjectContext, x as unwrap } from "../../../../core-DsGA_HuL.mjs";
-import { a as resolveColumns, i as renderList, r as defineApiCommand } from "../../../../factory-eslVs9tN.mjs";
+import { l as resolveProjectContext, x as unwrap } from "../../../../core-CY9pC37x.mjs";
+import { a as resolveColumns, i as renderList, r as defineApiCommand } from "../../../../factory-DTqayaCF.mjs";
 import chalk from "chalk";
 import { Flags } from "@oclif/core";
 //#region src/adapters/oclif/commands/org/list.ts

package/dist/adapters/oclif/commands/org/switch.mjs

@@ -1,5 +1,5 @@
-import { E as getConfig, H as saveCredentials, V as loadCredentials, a as formatInProjectSwitchWarning, b as createApiClient, l as resolveProjectContext, n as selectOrganization, x as unwrap } from "../../../../core-DsGA_HuL.mjs";
-import { t as BaseCommand } from "../../../../base.command-BLken6pU.mjs";
+import { E as getConfig, U as loadCredentials, W as saveCredentials, a as formatInProjectSwitchWarning, b as createApiClient, l as resolveProjectContext, n as selectOrganization, x as unwrap } from "../../../../core-CY9pC37x.mjs";
+import { t as BaseCommand } from "../../../../base.command-CnVb4RG6.mjs";
 import * as os from "os";
 import chalk from "chalk";
 import { Args } from "@oclif/core";

package/dist/adapters/oclif/commands/pull.d.mts

@@ -1,4 +1,4 @@
-import { d as PulledResource } from "../../../index-Blr5iiwc.mjs";
+import { d as PulledResource } from "../../../index-Cbb9pLt6.mjs";
 import { c as IacError } from "../../../context-D5uelKLe.mjs";
 import { t as BaseCommand } from "../../../base.command-BmddDbHa.mjs";
 import * as _$_oclif_core_interfaces0 from "@oclif/core/interfaces";

package/dist/adapters/oclif/commands/pull.mjs

@@ -1,5 +1,5 @@
-import { E as getConfig, _ as buildIacRegistry, b as createApiClient, p as pull, v as discoverProject, y as projectRoot } from "../../../core-DsGA_HuL.mjs";
-import { t as BaseCommand } from "../../../base.command-BLken6pU.mjs";
+import { E as getConfig, _ as buildIacRegistry, b as createApiClient, p as pull, v as discoverProject, y as projectRoot } from "../../../core-CY9pC37x.mjs";
+import { t as BaseCommand } from "../../../base.command-CnVb4RG6.mjs";
 import { n as renderIacErrors } from "../../../iac-render-BSZZEP0n.mjs";
 import chalk from "chalk";
 import { Args, Flags } from "@oclif/core";

package/dist/adapters/oclif/commands/score-groups/create.mjs

@@ -1,4 +1,4 @@
-import { t as createCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { t as createCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/score-groups/create.ts
 var create_default = createCommand({
 	resource: "scoreGroups",

package/dist/adapters/oclif/commands/score-groups/delete.mjs

@@ -1,4 +1,4 @@
-import { n as deleteCommand } from "../../../../presets-D0AIVsGO.mjs";
+import { n as deleteCommand } from "../../../../presets-mJzFGMhG.mjs";
 //#region src/adapters/oclif/commands/score-groups/delete.ts
 var delete_default = deleteCommand({
 	resource: "scoreGroups",