@sprigr/cli 0.1.2

package/dist/commands/builds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"builds.js","sourceRoot":"","sources":["../../src/commands/builds.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAgB,MAAM,WAAW,CAAC;AAW9D,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAoB;IACtD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAC1G,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAC1E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,GAAG,CAAC,iBAAiB,CAAC,CAAC;YACvB,OAAO,CAAC,CAAC;QACX,CAAC;QACD,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/B,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAeD,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAC;IACrD,WAAW;IACX,QAAQ;IACR,WAAW;IACX,SAAS;CACV,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAmB;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;IACrC,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAC1G,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACnE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAEpC,+DAA+D;QAC/D,mEAAmE;QACnE,sDAAsD;QACtD,IAAI,OAAO,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACrE,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;gBACjE,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAClB,GAAG,CAAC,EAAE,CAAC,CAAC;oBACR,GAAG,CAAC,mBAAmB,CAAC,CAAC;oBACzB,GAAG,CAAC,IAAI,CAAC,CAAC;gBACZ,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,oCAAoC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC9F,CAAC;QACH,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAsB;IAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC7B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9B,aAAa,CAAC,CAAC,CAAC,gBAAgB,CAAC;QACjC,CAAC,CAAC,YAAY,IAAI,GAAG;QACrB,CAAC,CAAC,SAAS;KACZ,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,aAAa,CAAC,CAAgB;IACrC,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACjC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,cAAc,CAAC,GAAY;IAClC,IAAI,GAAG,YAAY,QAAQ;QAAE,OAAO,UAAU,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;IAC1E,OAAO,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;AACtE,CAAC"}

package/dist/commands/deploy.d.ts

@@ -0,0 +1,32 @@
+import { BuildSummary } from '../api.js';
+export interface DeployArgs {
+    siteId: string;
+    dir: string;
+    framework?: 'static' | 'next' | 'astro' | 'remix';
+    endpoint: string;
+    apiKey: string;
+    /** Polling interval in milliseconds — default 2000. */
+    pollIntervalMs?: number;
+    /** Polling ceiling in milliseconds — default 30 minutes. */
+    pollCeilingMs?: number;
+    /** Optional sink for human-readable progress lines. Defaults to console.log. */
+    log?: (line: string) => void;
+    /** Override fetch (tests). */
+    fetchImpl?: typeof fetch;
+    /** Override sleep (tests). */
+    sleep?: (ms: number) => Promise<void>;
+}
+/**
+ * `sprigr deploy` — bundle a directory, POST to start-build, poll until
+ * the build reaches a terminal status.
+ *
+ * Exit codes for the bin wrapper to forward to `process.exit`:
+ *   0  succeeded
+ *   1  failed | cancelled | API error | bundling error
+ *   2  invalid arguments / config (caller surfaces before invoking deploy)
+ *   124 polling ceiling reached without terminal status
+ */
+export declare function runDeploy(args: DeployArgs): Promise<{
+    exitCode: number;
+    build?: BuildSummary;
+}>;

package/dist/commands/deploy.js

@@ -0,0 +1,96 @@
+import { ApiClient, ApiError } from '../api.js';
+import { bundleDirectory } from '../bundler.js';
+const TERMINAL = new Set([
+    'succeeded',
+    'failed',
+    'cancelled',
+    'timeout',
+]);
+/**
+ * `sprigr deploy` — bundle a directory, POST to start-build, poll until
+ * the build reaches a terminal status.
+ *
+ * Exit codes for the bin wrapper to forward to `process.exit`:
+ *   0  succeeded
+ *   1  failed | cancelled | API error | bundling error
+ *   2  invalid arguments / config (caller surfaces before invoking deploy)
+ *   124 polling ceiling reached without terminal status
+ */
+export async function runDeploy(args) {
+    const log = args.log ?? ((line) => console.log(line));
+    const sleep = args.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+    log(`bundling ${args.dir} ...`);
+    const bundle = await bundleDirectory(args.dir, args.framework ?? 'static');
+    if ('errors' in bundle) {
+        for (const err of bundle.errors)
+            log(`  error: ${err}`);
+        return { exitCode: 1 };
+    }
+    const binaryNote = bundle.binaryCount > 0 ? ` (${bundle.binaryCount} binary)` : '';
+    log(`  ${bundle.fileCount} files${binaryNote}, ${formatBytes(bundle.totalBytes)}`);
+    const client = new ApiClient({ endpoint: args.endpoint, apiKey: args.apiKey, fetchImpl: args.fetchImpl });
+    log(`starting build for ${args.siteId} ...`);
+    let buildId;
+    try {
+        const start = await client.startBuild({
+            siteId: args.siteId,
+            files: bundle.files,
+            framework: args.framework ?? 'static',
+            source: 'cli',
+        });
+        buildId = start.buildId;
+        log(`  build ${buildId} (status=${start.status})`);
+    }
+    catch (err) {
+        if (err instanceof ApiError) {
+            log(`  failed to start: ${err.status} ${err.message}`);
+            if (err.status === 402) {
+                log(`  plan limit reached — visit the portal to upgrade or check usage.`);
+            }
+        }
+        else {
+            log(`  failed to start: ${err instanceof Error ? err.message : String(err)}`);
+        }
+        return { exitCode: 1 };
+    }
+    const intervalMs = args.pollIntervalMs ?? 2_000;
+    const ceilingMs = args.pollCeilingMs ?? 30 * 60_000;
+    const deadline = Date.now() + ceilingMs;
+    let lastStatus = null;
+    while (Date.now() < deadline) {
+        let build;
+        try {
+            const detail = await client.getBuild(args.siteId, buildId);
+            build = detail.build;
+        }
+        catch (err) {
+            // Transient — log and retry. ApiError 5xx should not abort the poll.
+            log(`  poll failed (${err instanceof Error ? err.message : String(err)}), retrying...`);
+            await sleep(intervalMs);
+            continue;
+        }
+        if (build.status !== lastStatus) {
+            log(`  status: ${build.status}`);
+            lastStatus = build.status;
+        }
+        if (TERMINAL.has(build.status)) {
+            if (build.status === 'succeeded') {
+                log(`  deployment ${build.deploymentId} (container ${build.containerSeconds ?? 0}s, ${build.durationMs ?? 0}ms)`);
+                return { exitCode: 0, build };
+            }
+            log(`  build did not succeed: ${build.status}${build.errorSummary ? ` — ${build.errorSummary}` : ''}`);
+            return { exitCode: 1, build };
+        }
+        await sleep(intervalMs);
+    }
+    log(`  timed out after ${(ceilingMs / 60_000).toFixed(0)} minutes — build is still running. Inspect with: sprigr builds get ${args.siteId} ${buildId}`);
+    return { exitCode: 124 };
+}
+function formatBytes(n) {
+    if (n < 1024)
+        return `${n} B`;
+    if (n < 1024 * 1024)
+        return `${(n / 1024).toFixed(1)} KiB`;
+    return `${(n / 1024 / 1024).toFixed(2)} MiB`;
+}
+//# sourceMappingURL=deploy.js.map

package/dist/commands/deploy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy.js","sourceRoot":"","sources":["../../src/commands/deploy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAgB,MAAM,WAAW,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAoBhD,MAAM,QAAQ,GAAwC,IAAI,GAAG,CAAC;IAC5D,WAAW;IACX,QAAQ;IACR,WAAW;IACX,SAAS;CACV,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAgB;IAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAElF,GAAG,CAAC,YAAY,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC,CAAC;IAC3E,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;QACvB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM;YAAE,GAAG,CAAC,YAAY,GAAG,EAAE,CAAC,CAAC;QACxD,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,WAAW,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,GAAG,CAAC,KAAK,MAAM,CAAC,SAAS,SAAS,UAAU,KAAK,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAEnF,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAE1G,GAAG,CAAC,sBAAsB,IAAI,CAAC,MAAM,MAAM,CAAC,CAAC;IAC7C,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC;YACpC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,QAAQ;YACrC,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;QACH,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QACxB,GAAG,CAAC,WAAW,OAAO,YAAY,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;YAC5B,GAAG,CAAC,sBAAsB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACvD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,GAAG,CAAC,oEAAoE,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,sBAAsB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,IAAI,KAAK,CAAC;IAChD,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,IAAI,EAAE,GAAG,MAAM,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,IAAI,UAAU,GAAkC,IAAI,CAAC;IAErD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,KAAmB,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC3D,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QACvB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,qEAAqE;YACrE,GAAG,CAAC,kBAAkB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YACxF,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;YACxB,SAAS;QACX,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAChC,GAAG,CAAC,aAAa,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACjC,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC;QAC5B,CAAC;QAED,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBACjC,GAAG,CAAC,gBAAgB,KAAK,CAAC,YAAY,eAAe,KAAK,CAAC,gBAAgB,IAAI,CAAC,MAAM,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,CAAC;gBAClH,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;YAChC,CAAC;YACD,GAAG,CAAC,4BAA4B,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvG,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;QAChC,CAAC;QAED,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;IAC1B,CAAC;IAED,GAAG,CAAC,qBAAqB,CAAC,SAAS,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,sEAAsE,IAAI,CAAC,MAAM,IAAI,OAAO,EAAE,CAAC,CAAC;IACxJ,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,WAAW,CAAC,CAAS;IAC5B,IAAI,CAAC,GAAG,IAAI;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC;IAC9B,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI;QAAE,OAAO,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;IAC3D,OAAO,GAAG,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;AAC/C,CAAC"}

package/dist/commands/login.d.ts

@@ -0,0 +1,54 @@
+/**
+ * `sprigr login` — RFC 8628 device authorization grant + PKCE (S256).
+ *
+ * Flow:
+ *   1. Generate a random code_verifier (43..128 chars from the RFC 7636
+ *      character set). Hash it with SHA-256 and base64url-encode →
+ *      that's the code_challenge we send to the server.
+ *   2. POST /api/v1/cli/device/start with the challenge + a clientName.
+ *      Server responds with deviceCode + userCode + verification URLs +
+ *      poll interval.
+ *   3. Print the user-friendly URL. Try to open it in a browser.
+ *   4. Poll /api/v1/cli/device/poll with the deviceCode + verifier.
+ *      Server hashes the verifier on receipt; PKCE means a stolen
+ *      deviceCode without the verifier is useless to an attacker.
+ *      While the device-code row is `pending`, we keep polling.
+ *      Once `approved`, the server mints a fresh sk_mcp_* key and
+ *      returns it.
+ *   5. Write the key to ~/.config/sprigr/credentials.json (mode 0600).
+ *
+ * Exit codes: 0 success, 1 user-cancelled / failure, 124 timeout.
+ */
+export interface LoginArgs {
+    endpoint: string;
+    /**
+     * Named profile to write credentials under. When set, the credentials
+     * land at `~/.config/sprigr/credentials/<profile>.json` instead of the
+     * legacy single-file `credentials.json`, so multiple tenants can be
+     * logged in side-by-side. When omitted, behaves identically to the
+     * pre-profile CLI.
+     */
+    profile?: string;
+    /** Don't try to open the browser; just print the URL. Useful in CI / SSH. */
+    noBrowser?: boolean;
+    /** Override fetch (tests). */
+    fetchImpl?: typeof fetch;
+    /** Override sleep (tests). */
+    sleep?: (ms: number) => Promise<void>;
+    /** Override stdout writer (tests). */
+    log?: (line: string) => void;
+    /** Override the user-facing client identifier. Default 'sprigr-cli/<version>'. */
+    clientName?: string;
+    /** Polling ceiling in milliseconds — default 11 minutes (just past the 10-min code TTL). */
+    pollCeilingMs?: number;
+}
+export declare function runLogin(args: LoginArgs): Promise<{
+    exitCode: number;
+    credentialPath?: string;
+}>;
+export declare function runLogout(args?: {
+    log?: (line: string) => void;
+    profile?: string;
+}): Promise<{
+    exitCode: number;
+}>;

package/dist/commands/login.js

@@ -0,0 +1,192 @@
+import { spawn } from 'node:child_process';
+import { credentialsFilePath, deleteCredentials, writeCredentials } from '../auth.js';
+const RFC7636_VERIFIER_CHARS = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-._~';
+function randomVerifier() {
+    // 64 chars from the unreserved-character set. Hits the 43..128 range
+    // RFC 7636 §4.1 requires.
+    const bytes = new Uint8Array(64);
+    // Node 20+ exposes globalThis.crypto with getRandomValues.
+    globalThis.crypto.getRandomValues(bytes);
+    let out = '';
+    for (let i = 0; i < bytes.length; i++) {
+        out += RFC7636_VERIFIER_CHARS[bytes[i] % RFC7636_VERIFIER_CHARS.length];
+    }
+    return out;
+}
+function base64UrlEncode(buf) {
+    const bytes = new Uint8Array(buf);
+    let s = '';
+    for (let i = 0; i < bytes.length; i++)
+        s += String.fromCharCode(bytes[i]);
+    return Buffer.from(s, 'binary').toString('base64')
+        .replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+async function pkceChallenge(verifier) {
+    const data = new TextEncoder().encode(verifier);
+    const digest = await globalThis.crypto.subtle.digest('SHA-256', data);
+    return base64UrlEncode(digest);
+}
+function tryOpenBrowser(url) {
+    // macOS = `open`, Linux = `xdg-open`, Windows = `start ""`. Failures
+    // are silent — the URL is printed regardless so the user can always
+    // copy-paste it.
+    const platform = process.platform;
+    let cmd;
+    let args;
+    if (platform === 'darwin') {
+        cmd = 'open';
+        args = [url];
+    }
+    else if (platform === 'win32') {
+        cmd = 'cmd';
+        args = ['/c', 'start', '""', url];
+    }
+    else {
+        cmd = 'xdg-open';
+        args = [url];
+    }
+    try {
+        const child = spawn(cmd, args, { stdio: 'ignore', detached: true });
+        child.on('error', () => { });
+        child.unref();
+    }
+    catch {
+        // best-effort; URL is still printed
+    }
+}
+export async function runLogin(args) {
+    const log = args.log ?? ((line) => process.stdout.write(line + '\n'));
+    const sleep = args.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+    const fetchImpl = args.fetchImpl ?? fetch;
+    const clientName = args.clientName ?? 'sprigr-cli/0.1.0';
+    // 1. PKCE
+    const verifier = randomVerifier();
+    const challenge = await pkceChallenge(verifier);
+    // 2. Start
+    let start;
+    try {
+        const res = await fetchImpl(`${args.endpoint}/api/v1/cli/device/start`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json', Accept: 'application/json' },
+            body: JSON.stringify({
+                codeChallenge: challenge,
+                codeChallengeMethod: 'S256',
+                clientName,
+            }),
+        });
+        if (!res.ok) {
+            const body = await res.text();
+            log(`failed to start login: HTTP ${res.status} ${body}`);
+            return { exitCode: 1 };
+        }
+        start = await res.json();
+    }
+    catch (err) {
+        log(`failed to start login: ${err instanceof Error ? err.message : String(err)}`);
+        return { exitCode: 1 };
+    }
+    log('');
+    log(`Open this URL to authorize: ${start.verificationUriComplete}`);
+    log(`(Code: ${start.userCode})`);
+    log('');
+    log('Waiting for browser approval…');
+    if (!args.noBrowser) {
+        tryOpenBrowser(start.verificationUriComplete);
+    }
+    // 3. Poll
+    const intervalMs = Math.max(1, start.interval) * 1000;
+    const ceilingMs = args.pollCeilingMs ?? 11 * 60 * 1000;
+    const deadline = Date.now() + ceilingMs;
+    while (Date.now() < deadline) {
+        await sleep(intervalMs);
+        let res;
+        try {
+            res = await fetchImpl(`${args.endpoint}/api/v1/cli/device/poll`, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json', Accept: 'application/json' },
+                body: JSON.stringify({ deviceCode: start.deviceCode, codeVerifier: verifier }),
+            });
+        }
+        catch (err) {
+            // Network hiccup — log + retry. Don't fail the login on a transient
+            // error halfway through the user's approval.
+            log(`  poll failed (${err instanceof Error ? err.message : String(err)}), retrying…`);
+            continue;
+        }
+        if (res.status === 410) {
+            log('Login session expired. Re-run `sprigr login`.');
+            return { exitCode: 1 };
+        }
+        if (res.status === 403) {
+            log('Login was denied.');
+            return { exitCode: 1 };
+        }
+        if (!res.ok) {
+            // Specifically a verifier_mismatch is unrecoverable — that means
+            // someone other than us produced this deviceCode (shouldn't happen
+            // unless the random verifier collided, which is astronomically
+            // unlikely). Surface and exit.
+            const body = await res.text();
+            log(`unexpected poll response: HTTP ${res.status} ${body}`);
+            return { exitCode: 1 };
+        }
+        const data = await res.json();
+        if ('status' in data) {
+            // Still pending — loop. The server tells us the poll interval each
+            // time so we honor the latest server-side guidance.
+            if (data.status === 'pending' && data.interval) {
+                // No-op; the constant intervalMs above is enough for MVP.
+            }
+            continue;
+        }
+        // Success — write credentials.
+        const success = data;
+        const path = await writeCredentials({
+            apiKey: success.apiKey,
+            keyPrefix: success.keyPrefix,
+            keyId: success.keyId,
+            companyId: success.companyId,
+            userId: success.userId,
+            endpoint: args.endpoint,
+            loggedInAt: new Date().toISOString(),
+        }, args.profile);
+        log('');
+        log(`Logged in as ${success.userId} (company ${success.companyId})`);
+        log(`Key prefix: ${success.keyPrefix}`);
+        if (args.profile) {
+            log(`Profile: ${args.profile}`);
+            log(`Credentials saved to ${path} (mode 0600)`);
+            log(`Use this profile on subsequent commands:`);
+            log(`  sprigr --profile ${args.profile} <command>`);
+            log(`  SPRIGR_PROFILE=${args.profile} sprigr <command>`);
+        }
+        else {
+            log(`Credentials saved to ${path} (mode 0600)`);
+        }
+        return { exitCode: 0, credentialPath: path };
+    }
+    log('Timed out waiting for approval. Re-run `sprigr login` to try again.');
+    return { exitCode: 124 };
+}
+export async function runLogout(args = {}) {
+    const log = args.log ?? ((line) => process.stdout.write(line + '\n'));
+    try {
+        const removed = await deleteCredentials(args.profile);
+        const target = credentialsFilePath(args.profile);
+        if (removed) {
+            log(`Logged out (removed ${target}).`);
+        }
+        else if (args.profile) {
+            log(`No credentials for profile "${args.profile}" (${target}).`);
+        }
+        else {
+            log('You were not logged in (no credentials file).');
+        }
+        return { exitCode: 0 };
+    }
+    catch (err) {
+        log(`Failed to remove credentials: ${err instanceof Error ? err.message : String(err)}`);
+        return { exitCode: 1 };
+    }
+}
+//# sourceMappingURL=login.js.map

package/dist/commands/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAuEtF,MAAM,sBAAsB,GAAG,oEAAoE,CAAC;AAEpG,SAAS,cAAc;IACrB,qEAAqE;IACrE,0BAA0B;IAC1B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,2DAA2D;IAC3D,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,GAAG,IAAI,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAE,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,eAAe,CAAC,GAAgB;IACvC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;IAC3E,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;SAC/C,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAChE,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,QAAgB;IAC3C,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACtE,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,qEAAqE;IACrE,oEAAoE;IACpE,iBAAiB;IACjB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,IAAI,GAAW,CAAC;IAChB,IAAI,IAAc,CAAC;IACnB,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,GAAG,GAAG,MAAM,CAAC;QAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;SAAM,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,GAAG,GAAG,KAAK,CAAC;QAAC,IAAI,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;SAAM,CAAC;QACN,GAAG,GAAG,UAAU,CAAC;QAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAiB,CAAC,CAAC,CAAC;QAC3C,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,oCAAoC;IACtC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAe;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;IACtE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAClF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,kBAAkB,CAAC;IAEzD,UAAU;IACV,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;IAClC,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;IAEhD,WAAW;IACX,IAAI,KAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,IAAI,CAAC,QAAQ,0BAA0B,EAAE;YACtE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,EAAE;YAC3E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,aAAa,EAAE,SAAS;gBACxB,mBAAmB,EAAE,MAAM;gBAC3B,UAAU;aACX,CAAC;SACH,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,GAAG,CAAC,+BAA+B,GAAG,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;YACzD,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACzB,CAAC;QACD,KAAK,GAAG,MAAM,GAAG,CAAC,IAAI,EAAyB,CAAC;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,0BAA0B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClF,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;IAED,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,+BAA+B,KAAK,CAAC,uBAAuB,EAAE,CAAC,CAAC;IACpE,GAAG,CAAC,UAAU,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC;IACjC,GAAG,CAAC,EAAE,CAAC,CAAC;IACR,GAAG,CAAC,+BAA+B,CAAC,CAAC;IAErC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACpB,cAAc,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAChD,CAAC;IAED,UAAU;IACV,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;IACtD,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAExC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;QAExB,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,IAAI,CAAC,QAAQ,yBAAyB,EAAE;gBAC/D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,EAAE;gBAC3E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;aAC/E,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,oEAAoE;YACpE,6CAA6C;YAC7C,GAAG,CAAC,kBAAkB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACtF,SAAS;QACX,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,GAAG,CAAC,+CAA+C,CAAC,CAAC;YACrD,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACzB,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,GAAG,CAAC,mBAAmB,CAAC,CAAC;YACzB,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACzB,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,iEAAiE;YACjE,mEAAmE;YACnE,+DAA+D;YAC/D,+BAA+B;YAC/B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,GAAG,CAAC,kCAAkC,GAAG,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;YAC5D,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACzB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAA+C,CAAC;QAC3E,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;YACrB,mEAAmE;YACnE,oDAAoD;YACpD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC/C,0DAA0D;YAC5D,CAAC;YACD,SAAS;QACX,CAAC;QAED,+BAA+B;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC;QACrB,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC;YAClC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACjB,GAAG,CAAC,EAAE,CAAC,CAAC;QACR,GAAG,CAAC,gBAAgB,OAAO,CAAC,MAAM,aAAa,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QACrE,GAAG,CAAC,eAAe,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,GAAG,CAAC,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YAChC,GAAG,CAAC,wBAAwB,IAAI,cAAc,CAAC,CAAC;YAChD,GAAG,CAAC,0CAA0C,CAAC,CAAC;YAChD,GAAG,CAAC,sBAAsB,IAAI,CAAC,OAAO,YAAY,CAAC,CAAC;YACpD,GAAG,CAAC,oBAAoB,IAAI,CAAC,OAAO,mBAAmB,CAAC,CAAC;QAC3D,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,wBAAwB,IAAI,cAAc,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IAC/C,CAAC;IAED,GAAG,CAAC,qEAAqE,CAAC,CAAC;IAC3E,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAA2D,EAAE;IAC3F,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;IACtE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,OAAO,EAAE,CAAC;YACZ,GAAG,CAAC,uBAAuB,MAAM,IAAI,CAAC,CAAC;QACzC,CAAC;aAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxB,GAAG,CAAC,+BAA+B,IAAI,CAAC,OAAO,MAAM,MAAM,IAAI,CAAC,CAAC;QACnE,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,+CAA+C,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,iCAAiC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzF,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;AACH,CAAC"}

package/dist/commands/whoami.d.ts

@@ -0,0 +1,10 @@
+export interface WhoamiArgs {
+    profile?: string;
+    /** When true, list every profile we have credentials for. */
+    all?: boolean;
+    /** Test injection. */
+    log?: (line: string) => void;
+}
+export declare function runWhoami(args: WhoamiArgs): Promise<{
+    exitCode: number;
+}>;

package/dist/commands/whoami.js

@@ -0,0 +1,54 @@
+/**
+ * `sprigr whoami` — print the active profile + endpoint + companyId.
+ *
+ * Useful for confirming which tenant the next command is going to target,
+ * especially in shells that mix `--profile` flags, `SPRIGR_PROFILE` env,
+ * and the legacy single-file credentials. Reads only — never writes.
+ */
+import { credentialsFilePath, listProfilesSync, readCredentialsSync, } from '../auth.js';
+import { resolveEndpoint } from '../config.js';
+export async function runWhoami(args) {
+    const log = args.log ?? ((line) => process.stdout.write(line + '\n'));
+    if (args.all) {
+        const profiles = listProfilesSync();
+        if (profiles.length === 0) {
+            log('No credentials found. Run `sprigr login` (or `sprigr login --profile <name>`).');
+            return { exitCode: 0 };
+        }
+        log('Configured profiles:');
+        for (const p of profiles) {
+            const creds = p.isLegacy
+                ? readCredentialsSync() // legacy single-file
+                : readCredentialsSync(p.name);
+            const label = p.isLegacy ? '(no profile / default file)' : p.name;
+            if (!creds) {
+                log(`  ${label}  — file present but unreadable`);
+                continue;
+            }
+            const endpoint = creds.endpoint ?? '(unset)';
+            const company = creds.companyId ?? '(unset)';
+            log(`  ${label.padEnd(28)}  ${endpoint}  ${company}`);
+        }
+        return { exitCode: 0 };
+    }
+    const creds = readCredentialsSync(args.profile);
+    const endpoint = resolveEndpoint({ profile: args.profile });
+    if (!creds) {
+        log(args.profile
+            ? `No credentials for profile "${args.profile}". Run:`
+            : 'Not logged in. Run:');
+        log(args.profile
+            ? `  sprigr login --profile ${args.profile} --endpoint ${endpoint}`
+            : `  sprigr login --endpoint ${endpoint}`);
+        return { exitCode: 1 };
+    }
+    log(`Profile:      ${args.profile ?? '(default)'}`);
+    log(`Endpoint:     ${endpoint}`);
+    log(`Company:      ${creds.companyId ?? '(unset)'}`);
+    log(`User:         ${creds.userId ?? '(unset)'}`);
+    log(`Key prefix:   ${creds.keyPrefix ?? '(unset)'}`);
+    log(`Logged in at: ${creds.loggedInAt}`);
+    log(`File:         ${credentialsFilePath(args.profile)}`);
+    return { exitCode: 0 };
+}
+//# sourceMappingURL=whoami.js.map

package/dist/commands/whoami.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"whoami.js","sourceRoot":"","sources":["../../src/commands/whoami.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAU/C,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAgB;IAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;IAEtE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,MAAM,QAAQ,GAAG,gBAAgB,EAAE,CAAC;QACpC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,GAAG,CAAC,gFAAgF,CAAC,CAAC;YACtF,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACzB,CAAC;QACD,GAAG,CAAC,sBAAsB,CAAC,CAAC;QAC5B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ;gBACtB,CAAC,CAAC,mBAAmB,EAAE,CAAwB,qBAAqB;gBACpE,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAChC,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAClE,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,GAAG,CAAC,KAAK,KAAK,iCAAiC,CAAC,CAAC;gBACjD,SAAS;YACX,CAAC;YACD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,SAAS,CAAC;YAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,IAAI,SAAS,CAAC;YAC7C,GAAG,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,QAAQ,KAAK,OAAO,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;IAED,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,GAAG,CAAC,IAAI,CAAC,OAAO;YACd,CAAC,CAAC,+BAA+B,IAAI,CAAC,OAAO,SAAS;YACtD,CAAC,CAAC,qBAAqB,CAAC,CAAC;QAC3B,GAAG,CAAC,IAAI,CAAC,OAAO;YACd,CAAC,CAAC,4BAA4B,IAAI,CAAC,OAAO,eAAe,QAAQ,EAAE;YACnE,CAAC,CAAC,6BAA6B,QAAQ,EAAE,CAAC,CAAC;QAC7C,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;IAED,GAAG,CAAC,iBAAiB,IAAI,CAAC,OAAO,IAAI,WAAW,EAAE,CAAC,CAAC;IACpD,GAAG,CAAC,iBAAiB,QAAQ,EAAE,CAAC,CAAC;IACjC,GAAG,CAAC,iBAAiB,KAAK,CAAC,SAAS,IAAI,SAAS,EAAE,CAAC,CAAC;IACrD,GAAG,CAAC,iBAAiB,KAAK,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;IAClD,GAAG,CAAC,iBAAiB,KAAK,CAAC,SAAS,IAAI,SAAS,EAAE,CAAC,CAAC;IACrD,GAAG,CAAC,iBAAiB,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;IACzC,GAAG,CAAC,iBAAiB,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC1D,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AACzB,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,23 @@
+export interface ResolvedConfig {
+    endpoint: string;
+    apiKey: string;
+}
+/**
+ * Resolve the active profile name.
+ *
+ * Resolution order:
+ *   1. `--profile <name>` flag
+ *   2. `SPRIGR_PROFILE` env var
+ *   3. undefined (use legacy single-file credentials)
+ *
+ * Returns undefined when no profile is active so callers fall back to the
+ * single-file `~/.config/sprigr/credentials.json` and existing setups keep
+ * working unchanged.
+ */
+export declare function resolveProfile(opts: {
+    flag?: string;
+}): string | undefined;
+export declare function resolveEndpoint(opts: {
+    flag?: string;
+    profile?: string;
+}): string;

package/dist/config.js

@@ -0,0 +1,65 @@
+/**
+ * Resolve the API endpoint base URL.
+ *
+ * Resolution order:
+ *   1. `--endpoint <url>` flag (highest priority — for local-dev override)
+ *   2. `SPRIGR_ENDPOINT` env var
+ *   3. Credentials file `endpoint` field (sticky from last `sprigr login`)
+ *      — profile-scoped when `profile` is set, legacy single-file otherwise
+ *   4. Hard default: production gateway
+ *
+ * Local dev typically uses `http://localhost:8788` (the gateway worker's pinned
+ * port) or a Cloudflare Tunnel hostname.
+ */
+import { assertValidProfileName, readEndpointFromFileSync } from './auth.js';
+const PROD_ENDPOINT = 'https://api.team.sprigr.com';
+const STAGING_ENDPOINT = 'https://staging-api-team.sprigr.com';
+/**
+ * Resolve the active profile name.
+ *
+ * Resolution order:
+ *   1. `--profile <name>` flag
+ *   2. `SPRIGR_PROFILE` env var
+ *   3. undefined (use legacy single-file credentials)
+ *
+ * Returns undefined when no profile is active so callers fall back to the
+ * single-file `~/.config/sprigr/credentials.json` and existing setups keep
+ * working unchanged.
+ */
+export function resolveProfile(opts) {
+    const fromFlag = opts.flag?.trim();
+    if (fromFlag) {
+        assertValidProfileName(fromFlag);
+        return fromFlag;
+    }
+    const fromEnv = process.env.SPRIGR_PROFILE?.trim();
+    if (fromEnv) {
+        assertValidProfileName(fromEnv);
+        return fromEnv;
+    }
+    return undefined;
+}
+export function resolveEndpoint(opts) {
+    const fromFlag = opts.flag?.trim();
+    if (fromFlag)
+        return expand(fromFlag);
+    const fromEnv = process.env.SPRIGR_ENDPOINT?.trim();
+    if (fromEnv)
+        return expand(fromEnv);
+    const fromFile = readEndpointFromFileSync(opts.profile);
+    if (fromFile)
+        return normalize(fromFile);
+    return PROD_ENDPOINT;
+}
+function expand(value) {
+    const lower = value.toLowerCase();
+    if (lower === 'staging')
+        return STAGING_ENDPOINT;
+    if (lower === 'prod' || lower === 'production')
+        return PROD_ENDPOINT;
+    return normalize(value);
+}
+function normalize(url) {
+    return url.replace(/\/+$/, '');
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC;AAE7E,MAAM,aAAa,GAAG,6BAA6B,CAAC;AACpD,MAAM,gBAAgB,GAAG,qCAAqC,CAAC;AAO/D;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAAC,IAAuB;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IACnC,IAAI,QAAQ,EAAE,CAAC;QACb,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QACjC,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;IACnD,IAAI,OAAO,EAAE,CAAC;QACZ,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAChC,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAyC;IACvE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IACnC,IAAI,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;IACpD,IAAI,OAAO;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxD,IAAI,QAAQ;QAAE,OAAO,SAAS,CAAC,QAAQ,CAAC,CAAC;IACzC,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IAClC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,gBAAgB,CAAC;IACjD,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,YAAY;QAAE,OAAO,aAAa,CAAC;IACrE,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC"}