@supatype/cli 0.1.6 → 0.1.9

package/dist/cli-install-method.js

@@ -0,0 +1,78 @@
+/**
+ * Detect how the supatype CLI was installed (npm, Homebrew, standalone CDN).
+ */
+function normalizePath(path) {
+    return path.replace(/\\/g, "/");
+}
+/**
+ * Inside a Bun-compiled binary, argv[1] is a path in the embedded filesystem, not on disk:
+ * `/$bunfs/root/supatype` on Linux and macOS, `B:/~BUN/root/supatype.exe` on Windows. No
+ * filesystem call can touch either, which is why self-update failed with
+ * `ENOENT: copyfile '/$bunfs/root/supatype'` and could never have replaced itself.
+ */
+const EMBEDDED_FS_PATH = /(^|\/)(\$bunfs|~BUN)\//i;
+/**
+ * The executable on disk.
+ *
+ * process.execPath is the compiled binary when running one, and the Node binary otherwise, so
+ * it is only correct to prefer it when argv[1] is an embedded path. Under Node the script path
+ * is what identifies the install.
+ */
+export function runningBinaryPath() {
+    const main = normalizePath(process.argv[1] ?? "");
+    return EMBEDDED_FS_PATH.test(main) ? process.execPath : (process.argv[1] ?? "");
+}
+/** The running binary sits in an npm or workspace layout. */
+function hasNpmInstallPath() {
+    const main = normalizePath(runningBinaryPath());
+    return (main.includes("node_modules") ||
+        main.includes("/dist/cli") ||
+        main.includes("/bin/supatype.js"));
+}
+/** Launched through an npm/pnpm/yarn script, whatever the binary's own layout. */
+function ranUnderPackageManager() {
+    return Boolean(process.env["npm_execpath"]) || Boolean(process.env["npm_lifecycle_event"]);
+}
+/** npm global, project dependency, or monorepo workspace build. */
+export function looksLikeNpmOrWorkspaceCLI() {
+    return hasNpmInstallPath() || ranUnderPackageManager();
+}
+/** Homebrew / Linuxbrew Cellar layout. */
+export function looksLikeHomebrewCLI() {
+    const main = normalizePath(runningBinaryPath());
+    if (!main)
+        return false;
+    if (/(?:^|\/)Cellar\/supatype\//.test(main))
+        return true;
+    const cellar = process.env["HOMEBREW_CELLAR"];
+    if (cellar && normalizePath(main).startsWith(normalizePath(cellar) + "/") && main.includes("/supatype/")) {
+        return true;
+    }
+    return false;
+}
+/**
+ * Which installer owns the running binary. This decides what `self-update`
+ * tells the user to run, so it has to describe the binary on disk.
+ *
+ * Path shape wins over `npm_*` in the environment: those are set whenever the
+ * CLI is invoked from a package script, which says nothing about how the binary
+ * got there. Trusting them meant a Homebrew or curl install called from an npm
+ * script was told to update itself with npm.
+ */
+export function detectCliInstallMethod() {
+    if (hasNpmInstallPath())
+        return "npm";
+    if (looksLikeHomebrewCLI())
+        return "homebrew";
+    if (isStandalonePath())
+        return "standalone";
+    if (ranUnderPackageManager())
+        return "npm";
+    return "standalone";
+}
+/** The `curl | sh` installer's default target. */
+function isStandalonePath() {
+    const main = normalizePath(runningBinaryPath());
+    return main.includes("/.supatype/bin/");
+}
+//# sourceMappingURL=cli-install-method.js.map

package/dist/cli-install-method.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-install-method.js","sourceRoot":"","sources":["../src/cli-install-method.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;AACjC,CAAC;AAED;;;;;GAKG;AACH,MAAM,gBAAgB,GAAG,yBAAyB,CAAA;AAElD;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IACjD,OAAO,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;AACjF,CAAC;AAED,6DAA6D;AAC7D,SAAS,iBAAiB;IACxB,MAAM,IAAI,GAAG,aAAa,CAAC,iBAAiB,EAAE,CAAC,CAAA;IAC/C,OAAO,CACL,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;QAC7B,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC1B,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAClC,CAAA;AACH,CAAC;AAED,kFAAkF;AAClF,SAAS,sBAAsB;IAC7B,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAA;AAC5F,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,0BAA0B;IACxC,OAAO,iBAAiB,EAAE,IAAI,sBAAsB,EAAE,CAAA;AACxD,CAAC;AAED,0CAA0C;AAC1C,MAAM,UAAU,oBAAoB;IAClC,MAAM,IAAI,GAAG,aAAa,CAAC,iBAAiB,EAAE,CAAC,CAAA;IAC/C,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAA;IAEvB,IAAI,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAExD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;IAC7C,IAAI,MAAM,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACzG,OAAO,IAAI,CAAA;IACb,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB;IACpC,IAAI,iBAAiB,EAAE;QAAE,OAAO,KAAK,CAAA;IACrC,IAAI,oBAAoB,EAAE;QAAE,OAAO,UAAU,CAAA;IAC7C,IAAI,gBAAgB,EAAE;QAAE,OAAO,YAAY,CAAA;IAC3C,IAAI,sBAAsB,EAAE;QAAE,OAAO,KAAK,CAAA;IAC1C,OAAO,YAAY,CAAA;AACrB,CAAC;AAED,kDAAkD;AAClD,SAAS,gBAAgB;IACvB,MAAM,IAAI,GAAG,aAAa,CAAC,iBAAiB,EAAE,CAAC,CAAA;IAC/C,OAAO,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAA;AACzC,CAAC"}

package/dist/cli-package-version.d.ts

@@ -1,3 +1,3 @@
-/** Installed @supatype/cli version from package.json (used by --version and init scaffolding). */
+/** Installed @supatype/cli version (used by --version and init scaffolding). */
 export declare function cliPackageVersion(): string;
 //# sourceMappingURL=cli-package-version.d.ts.map

package/dist/cli-package-version.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli-package-version.d.ts","sourceRoot":"","sources":["../src/cli-package-version.ts"],"names":[],"mappings":"AAMA,kGAAkG;AAClG,wBAAgB,iBAAiB,IAAI,MAAM,CAO1C"}
+{"version":3,"file":"cli-package-version.d.ts","sourceRoot":"","sources":["../src/cli-package-version.ts"],"names":[],"mappings":"AAOA,gFAAgF;AAChF,wBAAgB,iBAAiB,IAAI,MAAM,CAU1C"}

package/dist/cli-package-version.js

@@ -1,9 +1,14 @@
 import { readFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
+import { EMBEDDED_CLI_VERSION } from "./cli-version-embedded.js";
 const CLI_PACKAGE_JSON = join(dirname(fileURLToPath(import.meta.url)), "..", "package.json");
-/** Installed @supatype/cli version from package.json (used by --version and init scaffolding). */
+/** Installed @supatype/cli version (used by --version and init scaffolding). */
 export function cliPackageVersion() {
+    // Set in published builds; the package.json read below only works when one is on disk,
+    // which is true for the npm package and false inside the standalone binary.
+    if (EMBEDDED_CLI_VERSION !== "")
+        return EMBEDDED_CLI_VERSION;
     try {
         const pkg = JSON.parse(readFileSync(CLI_PACKAGE_JSON, "utf8"));
         return pkg.version ?? "0.0.0";

package/dist/cli-package-version.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli-package-version.js","sourceRoot":"","sources":["../src/cli-package-version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAExC,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,CAAA;AAE5F,kGAAkG;AAClG,MAAM,UAAU,iBAAiB;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAyB,CAAA;QACtF,OAAO,GAAG,CAAC,OAAO,IAAI,OAAO,CAAA;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAA;IAChB,CAAC;AACH,CAAC"}
+{"version":3,"file":"cli-package-version.js","sourceRoot":"","sources":["../src/cli-package-version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAEhE,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,CAAA;AAE5F,gFAAgF;AAChF,MAAM,UAAU,iBAAiB;IAC/B,uFAAuF;IACvF,4EAA4E;IAC5E,IAAI,oBAAoB,KAAK,EAAE;QAAE,OAAO,oBAAoB,CAAA;IAC5D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAyB,CAAA;QACtF,OAAO,GAAG,CAAC,OAAO,IAAI,OAAO,CAAA;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAA;IAChB,CAAC;AACH,CAAC"}

package/dist/cli-standalone.d.ts

@@ -1,10 +1,19 @@
 /**
- * Standalone CLI binary CDN download (self-update + curl|sh installers).
+ * Standalone CLI archive download, used by `supatype self-update`.
+ *
+ * The artefact is a per-platform archive holding one executable, not a bare executable, and it
+ * is verified against the release's checksums.sha256 before anything is replaced. Previously
+ * this path checked only that the download was over 64 bytes and did not begin like HTML or
+ * JSON, which made the CLI stricter about a postgres archive than about overwriting itself.
  */
 import { type PlatformId } from "./binary-cache.js";
-export declare function cliCdnPath(version: string, platform: PlatformId): string;
+import { type LibcId } from "./cli-artifacts.js";
+/** Where a downloaded release is unpacked, so a repeated update does not refetch it. */
 export declare function cliCachePath(version: string, platform?: PlatformId): string;
 export declare function fetchStandaloneCliLatestVersion(): Promise<string>;
-/** Download the standalone CLI binary for the current platform. */
-export declare function downloadStandaloneCli(version?: string): Promise<string>;
+/**
+ * Download and verify the standalone CLI for this machine, returning the path to the
+ * executable. Nothing is written to the cache until the checksum matches.
+ */
+export declare function downloadStandaloneCli(version?: string, platform?: PlatformId, libc?: LibcId): Promise<string>;
 //# sourceMappingURL=cli-standalone.d.ts.map

package/dist/cli-standalone.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli-standalone.d.ts","sourceRoot":"","sources":["../src/cli-standalone.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,OAAO,EAAmB,KAAK,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAIpE,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,GAAG,MAAM,CAGxE;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,GAAE,UAA8B,GAAG,MAAM,CAI9F;AAED,wBAAsB,+BAA+B,IAAI,OAAO,CAAC,MAAM,CAAC,CAUvE;AAED,mEAAmE;AACnE,wBAAsB,qBAAqB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA0B7E"}
+{"version":3,"file":"cli-standalone.d.ts","sourceRoot":"","sources":["../src/cli-standalone.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,OAAO,EAAmC,KAAK,UAAU,EAAE,MAAM,mBAAmB,CAAA;AACpF,OAAO,EAML,KAAK,MAAM,EACZ,MAAM,oBAAoB,CAAA;AAc3B,wFAAwF;AACxF,wBAAgB,YAAY,CAC1B,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,UAA8B,GACvC,MAAM,CAER;AAED,wBAAsB,+BAA+B,IAAI,OAAO,CAAC,MAAM,CAAC,CAUvE;AA6CD;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,CAAC,EAAE,MAAM,EAChB,QAAQ,GAAE,UAA8B,EACxC,IAAI,GAAE,MAA8B,GACnC,OAAO,CAAC,MAAM,CAAC,CAoCjB"}

package/dist/cli-standalone.js

@@ -1,19 +1,32 @@
 /**
- * Standalone CLI binary CDN download (self-update + curl|sh installers).
+ * Standalone CLI archive download, used by `supatype self-update`.
+ *
+ * The artefact is a per-platform archive holding one executable, not a bare executable, and it
+ * is verified against the release's checksums.sha256 before anything is replaced. Previously
+ * this path checked only that the download was over 64 bytes and did not begin like HTML or
+ * JSON, which made the CLI stricter about a postgres archive than about overwriting itself.
  */
-import { chmodSync, existsSync, mkdirSync, writeFileSync } from "node:fs";
-import { homedir } from "node:os";
+import { chmodSync, existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { createHash } from "node:crypto";
+import { homedir, tmpdir } from "node:os";
 import { join } from "node:path";
-import { currentPlatform } from "./binary-cache.js";
-const CDN_BASE = "https://releases.supatype.com";
-export function cliCdnPath(version, platform) {
-    const win = platform.os === "windows";
-    return `/cli/v${version}/supatype-cli-${platform.os}-${platform.arch}${win ? ".exe" : ""}`;
-}
+import { spawnSync } from "node:child_process";
+import { currentPlatform, fetchChecksums } from "./binary-cache.js";
+import { cliArchiveName, cliArchivePath, cliChecksumsPath, cliExecutableName, currentLibc, } from "./cli-artifacts.js";
+/**
+ * Overridable for the same reason scripts/install.sh takes SUPATYPE_CDN: with the host fixed,
+ * nothing can exercise this path except a real release, which is how it came to request bare
+ * executables the publisher had stopped writing. SUPATYPE_CDN_BASE is the CDN root, where
+ * install.sh's SUPATYPE_CDN is the root plus /cli.
+ *
+ * binary-cache.ts hardcodes the same host for component downloads and could use the same
+ * treatment, which is left alone here as it is not part of this change.
+ */
+const CDN_BASE = process.env["SUPATYPE_CDN_BASE"]?.replace(/\/$/, "")
+    || "https://releases.supatype.com";
+/** Where a downloaded release is unpacked, so a repeated update does not refetch it. */
 export function cliCachePath(version, platform = currentPlatform()) {
-    const win = platform.os === "windows";
-    const name = `supatype-cli-${platform.os}-${platform.arch}${win ? ".exe" : ""}`;
-    return join(homedir(), ".supatype", "cache", "cli", version, name);
+    return join(homedir(), ".supatype", "cache", "cli", version, cliExecutableName(platform));
 }
 export async function fetchStandaloneCliLatestVersion() {
     const resp = await fetch(`${CDN_BASE}/cli/latest.json`);
@@ -26,31 +39,73 @@ export async function fetchStandaloneCliLatestVersion() {
     }
     return data.version.trim();
 }
-/** Download the standalone CLI binary for the current platform. */
-export async function downloadStandaloneCli(version) {
-    const platform = currentPlatform();
+async function fetchBytes(url, what) {
+    const resp = await fetch(url);
+    if (!resp.ok) {
+        throw new Error(`Failed to download ${what} from ${url}: HTTP ${resp.status}`);
+    }
+    return Buffer.from(await resp.arrayBuffer());
+}
+/**
+ * Unpack the single executable from an archive.
+ *
+ * PowerShell on Windows, because Git Bash's tar is usually first on PATH there and chokes on
+ * drive-letter paths. The same split exists in commands/dev.ts for component archives.
+ */
+function unpackExecutable(archivePath, destDir, platform) {
+    mkdirSync(destDir, { recursive: true });
+    const result = platform.os === "windows"
+        ? spawnSync("powershell.exe", [
+            "-NoProfile",
+            "-Command",
+            `Expand-Archive -Path '${archivePath}' -DestinationPath '${destDir}' -Force`,
+        ], { stdio: "pipe" })
+        : spawnSync("tar", ["-xzf", archivePath, "-C", destDir], { stdio: "pipe" });
+    if (result.status !== 0) {
+        throw new Error(`Failed to unpack ${archivePath}: ${result.stderr?.toString().trim() || "unknown error"}`);
+    }
+    const exe = join(destDir, cliExecutableName(platform));
+    if (!existsSync(exe)) {
+        throw new Error(`${cliArchiveName(platform)} did not contain ${cliExecutableName(platform)}.`);
+    }
+    return exe;
+}
+/**
+ * Download and verify the standalone CLI for this machine, returning the path to the
+ * executable. Nothing is written to the cache until the checksum matches.
+ */
+export async function downloadStandaloneCli(version, platform = currentPlatform(), libc = currentLibc(platform)) {
     const resolved = version ?? await fetchStandaloneCliLatestVersion();
     const dest = cliCachePath(resolved, platform);
     if (existsSync(dest))
         return dest;
-    const url = `${CDN_BASE}${cliCdnPath(resolved, platform)}`;
-    const resp = await fetch(url);
-    if (!resp.ok) {
-        throw new Error(`Failed to download CLI from ${url}: HTTP ${resp.status}`);
+    const name = cliArchiveName(platform, libc);
+    const archive = await fetchBytes(`${CDN_BASE}${cliArchivePath(resolved, platform, libc)}`, name);
+    // The manifest is verified before it is trusted, and only then is the archive compared
+    // against it. A checksum alone would prove the download was intact, not that it came from
+    // us, and the signature is what makes replacing our own executable no weaker than fetching
+    // a postgres archive. fetchChecksums treats the .minisig as mandatory and fails closed
+    // without a public key, which is the same rule component downloads follow.
+    const checksumsUrl = `${CDN_BASE}${cliChecksumsPath(resolved)}`;
+    const expected = await fetchChecksums(checksumsUrl, `${checksumsUrl}.minisig`, name);
+    const actual = createHash("sha256").update(archive).digest("hex");
+    if (actual !== expected.checksum) {
+        throw new Error(`Checksum mismatch for ${name}.\n  expected: ${expected.checksum}\n  actual:   ${actual}`);
     }
-    const buf = Buffer.from(await resp.arrayBuffer());
-    if (buf.length < 64) {
-        throw new Error("Downloaded CLI artifact is too small");
-    }
-    const head = buf.subarray(0, 5).toString("utf8").toLowerCase();
-    if (head.startsWith("<!doc") || head.startsWith("{")) {
-        throw new Error("Downloaded CLI artifact looks like an error page, not a binary");
+    const staging = join(tmpdir(), `supatype-cli-${resolved}-${process.pid}`);
+    try {
+        mkdirSync(staging, { recursive: true });
+        const archivePath = join(staging, name);
+        writeFileSync(archivePath, archive);
+        const unpacked = unpackExecutable(archivePath, staging, platform);
+        mkdirSync(join(dest, ".."), { recursive: true });
+        writeFileSync(dest, readFileSync(unpacked));
+        if (platform.os !== "windows")
+            chmodSync(dest, 0o755);
+        return dest;
     }
-    mkdirSync(join(dest, ".."), { recursive: true });
-    writeFileSync(dest, buf);
-    if (platform.os !== "windows") {
-        chmodSync(dest, 0o755);
+    finally {
+        rmSync(staging, { recursive: true, force: true });
     }
-    return dest;
 }
 //# sourceMappingURL=cli-standalone.js.map

package/dist/cli-standalone.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli-standalone.js","sourceRoot":"","sources":["../src/cli-standalone.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACzE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,eAAe,EAAmB,MAAM,mBAAmB,CAAA;AAEpE,MAAM,QAAQ,GAAG,+BAA+B,CAAA;AAEhD,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,QAAoB;IAC9D,MAAM,GAAG,GAAG,QAAQ,CAAC,EAAE,KAAK,SAAS,CAAA;IACrC,OAAO,SAAS,OAAO,iBAAiB,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;AAC5F,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,WAAuB,eAAe,EAAE;IACpF,MAAM,GAAG,GAAG,QAAQ,CAAC,EAAE,KAAK,SAAS,CAAA;IACrC,MAAM,IAAI,GAAG,gBAAgB,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;IAC/E,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAA;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B;IACnD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,kBAAkB,CAAC,CAAA;IACvD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;IACzE,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAA2B,CAAA;IACvD,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IAC7D,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAA;AAC5B,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAgB;IAC1D,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAA;IAClC,MAAM,QAAQ,GAAG,OAAO,IAAI,MAAM,+BAA+B,EAAE,CAAA;IACnE,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;IAC7C,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAEjC,MAAM,GAAG,GAAG,GAAG,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAA;IAC1D,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAA;IAC7B,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,UAAU,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;IAC5E,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;IACjD,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;IACzD,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAA;IAC9D,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAA;IACnF,CAAC;IAED,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAChD,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IACxB,IAAI,QAAQ,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;QAC9B,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IACxB,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}
+{"version":3,"file":"cli-standalone.js","sourceRoot":"","sources":["../src/cli-standalone.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC/F,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EAAE,eAAe,EAAE,cAAc,EAAmB,MAAM,mBAAmB,CAAA;AACpF,OAAO,EACL,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,WAAW,GAEZ,MAAM,oBAAoB,CAAA;AAE3B;;;;;;;;GAQG;AACH,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;OAChE,+BAA+B,CAAA;AAEpC,wFAAwF;AACxF,MAAM,UAAU,YAAY,CAC1B,OAAe,EACf,WAAuB,eAAe,EAAE;IAExC,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAA;AAC3F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B;IACnD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,kBAAkB,CAAC,CAAA;IACvD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;IACzE,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAA2B,CAAA;IACvD,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IAC7D,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAA;AAC5B,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,IAAY;IACjD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAA;IAC7B,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,SAAS,GAAG,UAAU,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;IAChF,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;AAC9C,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,WAAmB,EAAE,OAAe,EAAE,QAAoB;IAClF,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,EAAE,KAAK,SAAS;QACtC,CAAC,CAAC,SAAS,CACP,gBAAgB,EAChB;YACE,YAAY;YACZ,UAAU;YACV,yBAAyB,WAAW,uBAAuB,OAAO,UAAU;SAC7E,EACD,EAAE,KAAK,EAAE,MAAM,EAAE,CAClB;QACH,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;IAE7E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,oBAAoB,WAAW,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,eAAe,EAAE,CAC1F,CAAA;IACH,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAA;IACtD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,GAAG,cAAc,CAAC,QAAQ,CAAC,oBAAoB,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAC9E,CAAA;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAgB,EAChB,WAAuB,eAAe,EAAE,EACxC,OAAe,WAAW,CAAC,QAAQ,CAAC;IAEpC,MAAM,QAAQ,GAAG,OAAO,IAAI,MAAM,+BAA+B,EAAE,CAAA;IACnE,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;IAC7C,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAEjC,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IAC3C,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,GAAG,QAAQ,GAAG,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;IAEhG,uFAAuF;IACvF,0FAA0F;IAC1F,2FAA2F;IAC3F,uFAAuF;IACvF,2EAA2E;IAC3E,MAAM,YAAY,GAAG,GAAG,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAA;IAC/D,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,YAAY,EAAE,GAAG,YAAY,UAAU,EAAE,IAAI,CAAC,CAAA;IACpF,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACjE,IAAI,MAAM,KAAK,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,yBAAyB,IAAI,kBAAkB,QAAQ,CAAC,QAAQ,iBAAiB,MAAM,EAAE,CAC1F,CAAA;IACH,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,QAAQ,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IACzE,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACvC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QACvC,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;QACnC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;QAEjE,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAChD,aAAa,CAAC,IAAI,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC3C,IAAI,QAAQ,CAAC,EAAE,KAAK,SAAS;YAAE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACrD,OAAO,IAAI,CAAA;IACb,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACnD,CAAC;AACH,CAAC"}

package/dist/cli-version-embedded.d.ts

@@ -0,0 +1,10 @@
+/**
+ * CLI version, baked in at publish by scripts/set-version.mjs.
+ *
+ * The standalone binary cannot read its own package.json: pkg carries only files it can
+ * find by static analysis, and that path is assembled at runtime, so `--version` inside a
+ * published binary would answer 0.0.0 without this. Empty in a source checkout, where
+ * cliPackageVersion() falls back to reading package.json.
+ */
+export declare const EMBEDDED_CLI_VERSION: string;
+//# sourceMappingURL=cli-version-embedded.d.ts.map

package/dist/cli-version-embedded.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-version-embedded.d.ts","sourceRoot":"","sources":["../src/cli-version-embedded.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,eAAO,MAAM,oBAAoB,EAAE,MAAgB,CAAA"}

package/dist/cli-version-embedded.js

@@ -0,0 +1,13 @@
+/**
+ * CLI version, baked in at publish by scripts/set-version.mjs.
+ *
+ * The standalone binary cannot read its own package.json: pkg carries only files it can
+ * find by static analysis, and that path is assembled at runtime, so `--version` inside a
+ * published binary would answer 0.0.0 without this. Empty in a source checkout, where
+ * cliPackageVersion() falls back to reading package.json.
+ */
+// Annotated `string`, not left to inference: once a release stamps a value here, the
+// inferred literal type makes the `!== ""` test in cliPackageVersion() a compile error
+// (TS2367, no overlap), so the build would only fail during a release.
+export const EMBEDDED_CLI_VERSION = "0.1.9";
+//# sourceMappingURL=cli-version-embedded.js.map

package/dist/cli-version-embedded.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-version-embedded.js","sourceRoot":"","sources":["../src/cli-version-embedded.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,qFAAqF;AACrF,uFAAuF;AACvF,uEAAuE;AACvE,MAAM,CAAC,MAAM,oBAAoB,GAAW,OAAO,CAAA"}

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAmCA,wBAAsB,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CA6CzC"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAsCA,wBAAsB,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAgDzC"}

package/dist/cli.js

@@ -18,6 +18,7 @@ import { registerApp } from "./commands/app.js";
 import { registerAdd } from "./commands/add.js";
 import { registerSelfHost } from "./commands/self-host.js";
 import { registerCloud } from "./commands/cloud.js";
+import { registerLogin } from "./commands/login.js";
 import { registerEngine } from "./commands/engine.js";
 import { registerDb } from "./commands/db.js";
 import { registerDeploy } from "./commands/deploy.js";
@@ -25,22 +26,25 @@ import { registerStatus } from "./commands/status.js";
 import { registerLogs } from "./commands/logs.js";
 import { registerAdmin } from "./commands/admin.js";
 import { registerFunctions } from "./commands/functions.js";
+import { registerHooks } from "./commands/hooks.js";
 import { registerPlugins } from "./commands/plugins.js";
 import { registerTypes } from "./commands/types.js";
 import { registerMigrateFromV1 } from "./commands/migrate-from-v1.js";
 import { registerSelfUpdate } from "./commands/self-update.js";
+import { registerInternalCommands } from "./commands/internal.js";
 import { cliPackageVersion } from "./cli-package-version.js";
 import { reportCliFatal } from "./ui/fatal.js";
 import { wrapProgramActionsWithChrome } from "./ui/runtime/command-chrome.js";
 export async function run() {
     const program = new Command()
         .name("supatype")
-        .description("Supatype — type-first platform for PostgreSQL")
+        .description("Supatype: type-first platform for PostgreSQL")
         .version(cliPackageVersion());
     registerInit(program);
     registerDev(program);
     registerCache(program);
     registerSelfUpdate(program);
+    registerInternalCommands(program);
     registerUpdate(program);
     registerPg(program);
     registerPush(program);
@@ -56,6 +60,7 @@ export async function run() {
     registerApp(program);
     registerAdd(program);
     registerSelfHost(program);
+    registerLogin(program);
     registerCloud(program);
     registerEngine(program);
     registerDb(program);
@@ -64,6 +69,7 @@ export async function run() {
     registerLogs(program);
     registerAdmin(program);
     registerFunctions(program);
+    registerHooks(program);
     registerPlugins(program);
     registerTypes(program);
     registerMigrateFromV1(program);

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAA;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAC9C,OAAO,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAA;AAE7E,MAAM,CAAC,KAAK,UAAU,GAAG;IACvB,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE;SAC1B,IAAI,CAAC,UAAU,CAAC;SAChB,WAAW,CAAC,+CAA+C,CAAC;SAC5D,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAA;IAE/B,YAAY,CAAC,OAAO,CAAC,CAAA;IACrB,WAAW,CAAC,OAAO,CAAC,CAAA;IACpB,aAAa,CAAC,OAAO,CAAC,CAAA;IACtB,kBAAkB,CAAC,OAAO,CAAC,CAAA;IAC3B,cAAc,CAAC,OAAO,CAAC,CAAA;IACvB,UAAU,CAAC,OAAO,CAAC,CAAA;IACnB,YAAY,CAAC,OAAO,CAAC,CAAA;IACrB,YAAY,CAAC,OAAO,CAAC,CAAA;IACrB,YAAY,CAAC,OAAO,CAAC,CAAA;IACrB,cAAc,CAAC,OAAO,CAAC,CAAA;IACvB,kBAAkB,CAAC,OAAO,CAAC,CAAA;IAC3B,aAAa,CAAC,OAAO,CAAC,CAAA;IACtB,gBAAgB,CAAC,OAAO,CAAC,CAAA;IACzB,eAAe,CAAC,OAAO,CAAC,CAAA;IACxB,YAAY,CAAC,OAAO,CAAC,CAAA;IACrB,YAAY,CAAC,OAAO,CAAC,CAAA;IACrB,WAAW,CAAC,OAAO,CAAC,CAAA;IACpB,WAAW,CAAC,OAAO,CAAC,CAAA;IACpB,gBAAgB,CAAC,OAAO,CAAC,CAAA;IACzB,aAAa,CAAC,OAAO,CAAC,CAAA;IACtB,cAAc,CAAC,OAAO,CAAC,CAAA;IACvB,UAAU,CAAC,OAAO,CAAC,CAAA;IACnB,cAAc,CAAC,OAAO,CAAC,CAAA;IACvB,cAAc,CAAC,OAAO,CAAC,CAAA;IACvB,YAAY,CAAC,OAAO,CAAC,CAAA;IACrB,aAAa,CAAC,OAAO,CAAC,CAAA;IACtB,iBAAiB,CAAC,OAAO,CAAC,CAAA;IAC1B,eAAe,CAAC,OAAO,CAAC,CAAA;IACxB,aAAa,CAAC,OAAO,CAAC,CAAA;IACtB,qBAAqB,CAAC,OAAO,CAAC,CAAA;IAE9B,4BAA4B,CAAC,OAAO,CAAC,CAAA;IAErC,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,cAAc,CAAC,GAAG,CAAC,CAAA;QACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC"}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAA;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAC9D,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAA;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAC9C,OAAO,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAA;AAE7E,MAAM,CAAC,KAAK,UAAU,GAAG;IACvB,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE;SAC1B,IAAI,CAAC,UAAU,CAAC;SAChB,WAAW,CAAC,8CAA8C,CAAC;SAC3D,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAA;IAE/B,YAAY,CAAC,OAAO,CAAC,CAAA;IACrB,WAAW,CAAC,OAAO,CAAC,CAAA;IACpB,aAAa,CAAC,OAAO,CAAC,CAAA;IACtB,kBAAkB,CAAC,OAAO,CAAC,CAAA;IAC3B,wBAAwB,CAAC,OAAO,CAAC,CAAA;IACjC,cAAc,CAAC,OAAO,CAAC,CAAA;IACvB,UAAU,CAAC,OAAO,CAAC,CAAA;IACnB,YAAY,CAAC,OAAO,CAAC,CAAA;IACrB,YAAY,CAAC,OAAO,CAAC,CAAA;IACrB,YAAY,CAAC,OAAO,CAAC,CAAA;IACrB,cAAc,CAAC,OAAO,CAAC,CAAA;IACvB,kBAAkB,CAAC,OAAO,CAAC,CAAA;IAC3B,aAAa,CAAC,OAAO,CAAC,CAAA;IACtB,gBAAgB,CAAC,OAAO,CAAC,CAAA;IACzB,eAAe,CAAC,OAAO,CAAC,CAAA;IACxB,YAAY,CAAC,OAAO,CAAC,CAAA;IACrB,YAAY,CAAC,OAAO,CAAC,CAAA;IACrB,WAAW,CAAC,OAAO,CAAC,CAAA;IACpB,WAAW,CAAC,OAAO,CAAC,CAAA;IACpB,gBAAgB,CAAC,OAAO,CAAC,CAAA;IACzB,aAAa,CAAC,OAAO,CAAC,CAAA;IACtB,aAAa,CAAC,OAAO,CAAC,CAAA;IACtB,cAAc,CAAC,OAAO,CAAC,CAAA;IACvB,UAAU,CAAC,OAAO,CAAC,CAAA;IACnB,cAAc,CAAC,OAAO,CAAC,CAAA;IACvB,cAAc,CAAC,OAAO,CAAC,CAAA;IACvB,YAAY,CAAC,OAAO,CAAC,CAAA;IACrB,aAAa,CAAC,OAAO,CAAC,CAAA;IACtB,iBAAiB,CAAC,OAAO,CAAC,CAAA;IAC1B,aAAa,CAAC,OAAO,CAAC,CAAA;IACtB,eAAe,CAAC,OAAO,CAAC,CAAA;IACxB,aAAa,CAAC,OAAO,CAAC,CAAA;IACtB,qBAAqB,CAAC,OAAO,CAAC,CAAA;IAE9B,4BAA4B,CAAC,OAAO,CAAC,CAAA;IAErC,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,cAAc,CAAC,GAAG,CAAC,CAAA;QACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC"}

package/dist/cloud-credentials.d.ts

@@ -0,0 +1,34 @@
+import { type ProjectLink } from "./link.js";
+export declare const CREDENTIALS_VERSION: 1;
+export interface CloudCredentials {
+    version: typeof CREDENTIALS_VERSION;
+    apiUrl: string;
+    accessToken: string;
+    refreshToken?: string;
+    email?: string;
+    updatedAt: string;
+}
+export declare function credentialsPath(): string;
+export declare function loadCloudCredentials(): CloudCredentials | null;
+export declare function saveCloudCredentials(creds: CloudCredentials): void;
+export declare function clearCloudCredentials(): void;
+/** Prefer link tokens; fall back to ~/.supatype/credentials.json for cloud. */
+export declare function resolveCloudAccessToken(link: ProjectLink): string | undefined;
+export declare function resolveCloudRefreshToken(link: ProjectLink): string | undefined;
+/** Write tokens to global credentials and the current project's cloud link (if any). */
+export declare function persistCloudSession(cwd: string, params: {
+    apiUrl: string;
+    accessToken: string;
+    refreshToken?: string;
+    email?: string;
+}): void;
+export interface CloudLoginResult {
+    accessToken: string;
+    refreshToken?: string;
+    expiresIn?: number;
+    email?: string;
+}
+/** Password login against control-plane `/auth/login` (not `/api/v1`). */
+export declare function cloudPasswordLogin(apiUrl: string, email: string, password: string): Promise<CloudLoginResult>;
+export declare function cloudRefreshSession(apiUrl: string, refreshToken: string): Promise<CloudLoginResult>;
+//# sourceMappingURL=cloud-credentials.d.ts.map

package/dist/cloud-credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-credentials.d.ts","sourceRoot":"","sources":["../src/cloud-credentials.ts"],"names":[],"mappings":"AAOA,OAAO,EAGL,KAAK,WAAW,EACjB,MAAM,WAAW,CAAA;AAElB,eAAO,MAAM,mBAAmB,EAAG,CAAU,CAAA;AAE7C,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,mBAAmB,CAAA;IACnC,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED,wBAAgB,oBAAoB,IAAI,gBAAgB,GAAG,IAAI,CAU9D;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI,CAIlE;AAED,wBAAgB,qBAAqB,IAAI,IAAI,CAQ5C;AAED,+EAA+E;AAC/E,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,GAAG,SAAS,CAS7E;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,GAAG,SAAS,CAS9E;AAED,wFAAwF;AACxF,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE;IACN,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GACA,IAAI,CA2BN;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,0EAA0E;AAC1E,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,gBAAgB,CAAC,CA0B3B;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,gBAAgB,CAAC,CAsB3B"}

package/dist/cloud-credentials.js

@@ -0,0 +1,139 @@
+/**
+ * Cloud session credentials (access + refresh) for CLI ↔ control plane.
+ * Self-host links keep using long-lived SERVICE_ROLE_KEY and ignore this store.
+ */
+import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { loadProjectLink, saveProjectLink, } from "./link.js";
+export const CREDENTIALS_VERSION = 1;
+export function credentialsPath() {
+    return join(homedir(), ".supatype", "credentials.json");
+}
+export function loadCloudCredentials() {
+    const path = credentialsPath();
+    if (!existsSync(path))
+        return null;
+    try {
+        const raw = JSON.parse(readFileSync(path, "utf8"));
+        if (!raw.accessToken || !raw.apiUrl)
+            return null;
+        return raw;
+    }
+    catch {
+        return null;
+    }
+}
+export function saveCloudCredentials(creds) {
+    const dir = join(homedir(), ".supatype");
+    mkdirSync(dir, { recursive: true });
+    writeFileSync(credentialsPath(), `${JSON.stringify(creds, null, 2)}\n`, "utf8");
+}
+export function clearCloudCredentials() {
+    const path = credentialsPath();
+    if (!existsSync(path))
+        return;
+    try {
+        unlinkSync(path);
+    }
+    catch {
+        /* ignore */
+    }
+}
+/** Prefer link tokens; fall back to ~/.supatype/credentials.json for cloud. */
+export function resolveCloudAccessToken(link) {
+    if (link.token)
+        return link.token;
+    if (link.kind !== "cloud")
+        return undefined;
+    const creds = loadCloudCredentials();
+    if (!creds)
+        return undefined;
+    const linkApi = (link.cloudApiUrl ?? "").replace(/\/$/, "");
+    const credApi = creds.apiUrl.replace(/\/$/, "");
+    if (linkApi && credApi && linkApi !== credApi)
+        return undefined;
+    return creds.accessToken;
+}
+export function resolveCloudRefreshToken(link) {
+    if (link.refreshToken)
+        return link.refreshToken;
+    if (link.kind !== "cloud")
+        return undefined;
+    const creds = loadCloudCredentials();
+    if (!creds?.refreshToken)
+        return undefined;
+    const linkApi = (link.cloudApiUrl ?? "").replace(/\/$/, "");
+    const credApi = creds.apiUrl.replace(/\/$/, "");
+    if (linkApi && credApi && linkApi !== credApi)
+        return undefined;
+    return creds.refreshToken;
+}
+/** Write tokens to global credentials and the current project's cloud link (if any). */
+export function persistCloudSession(cwd, params) {
+    const apiUrl = params.apiUrl.replace(/\/$/, "");
+    const existing = loadCloudCredentials();
+    saveCloudCredentials({
+        version: CREDENTIALS_VERSION,
+        apiUrl,
+        accessToken: params.accessToken,
+        updatedAt: new Date().toISOString(),
+        ...(params.refreshToken !== undefined
+            ? { refreshToken: params.refreshToken }
+            : existing?.refreshToken !== undefined
+                ? { refreshToken: existing.refreshToken }
+                : {}),
+        ...(params.email !== undefined
+            ? { email: params.email }
+            : existing?.email !== undefined
+                ? { email: existing.email }
+                : {}),
+    });
+    const link = loadProjectLink(cwd);
+    if (!link || link.kind !== "cloud")
+        return;
+    link.token = params.accessToken;
+    if (params.refreshToken !== undefined) {
+        link.refreshToken = params.refreshToken;
+    }
+    saveProjectLink(cwd, link);
+}
+/** Password login against control-plane `/auth/login` (not `/api/v1`). */
+export async function cloudPasswordLogin(apiUrl, email, password) {
+    const base = apiUrl.replace(/\/$/, "");
+    const res = await fetch(`${base}/auth/login`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ email: email.toLowerCase(), password }),
+    });
+    const json = (await res.json().catch(() => ({})));
+    if (!res.ok || !json.access_token) {
+        throw new Error(json.message ?? json.error ?? `Login failed (${res.status})`);
+    }
+    return {
+        accessToken: json.access_token,
+        ...(json.refresh_token !== undefined ? { refreshToken: json.refresh_token } : {}),
+        ...(json.expires_in !== undefined ? { expiresIn: json.expires_in } : {}),
+        ...(json.user?.email !== undefined
+            ? { email: json.user.email }
+            : { email: email.toLowerCase() }),
+    };
+}
+export async function cloudRefreshSession(apiUrl, refreshToken) {
+    const base = apiUrl.replace(/\/$/, "");
+    const res = await fetch(`${base}/auth/refresh`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ refresh_token: refreshToken }),
+    });
+    const json = (await res.json().catch(() => ({})));
+    if (!res.ok || !json.access_token) {
+        throw new Error(json.message ?? json.error ?? `Token refresh failed (${res.status})`);
+    }
+    return {
+        accessToken: json.access_token,
+        ...(json.refresh_token !== undefined ? { refreshToken: json.refresh_token } : {}),
+        ...(json.expires_in !== undefined ? { expiresIn: json.expires_in } : {}),
+    };
+}
+//# sourceMappingURL=cloud-credentials.js.map

package/dist/cloud-credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-credentials.js","sourceRoot":"","sources":["../src/cloud-credentials.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACxF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EACL,eAAe,EACf,eAAe,GAEhB,MAAM,WAAW,CAAA;AAElB,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAU,CAAA;AAW7C,MAAM,UAAU,eAAe;IAC7B,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAA;AACzD,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,MAAM,IAAI,GAAG,eAAe,EAAE,CAAA;IAC9B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAqB,CAAA;QACtE,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QAChD,OAAO,GAAG,CAAA;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAuB;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAA;IACxC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACnC,aAAa,CAAC,eAAe,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;AACjF,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,MAAM,IAAI,GAAG,eAAe,EAAE,CAAA;IAC9B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAM;IAC7B,IAAI,CAAC;QACH,UAAU,CAAC,IAAI,CAAC,CAAA;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,uBAAuB,CAAC,IAAiB;IACvD,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC,KAAK,CAAA;IACjC,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,SAAS,CAAA;IAC3C,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAA;IACpC,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAA;IAC5B,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAC3D,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAC/C,IAAI,OAAO,IAAI,OAAO,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,SAAS,CAAA;IAC/D,OAAO,KAAK,CAAC,WAAW,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,IAAiB;IACxD,IAAI,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC,YAAY,CAAA;IAC/C,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,SAAS,CAAA;IAC3C,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAA;IACpC,IAAI,CAAC,KAAK,EAAE,YAAY;QAAE,OAAO,SAAS,CAAA;IAC1C,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAC3D,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAC/C,IAAI,OAAO,IAAI,OAAO,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,SAAS,CAAA;IAC/D,OAAO,KAAK,CAAC,YAAY,CAAA;AAC3B,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,mBAAmB,CACjC,GAAW,EACX,MAKC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAC/C,MAAM,QAAQ,GAAG,oBAAoB,EAAE,CAAA;IACvC,oBAAoB,CAAC;QACnB,OAAO,EAAE,mBAAmB;QAC5B,MAAM;QACN,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS;YACnC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE;YACvC,CAAC,CAAC,QAAQ,EAAE,YAAY,KAAK,SAAS;gBACpC,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE;gBACzC,CAAC,CAAC,EAAE,CAAC;QACT,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS;YAC5B,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE;YACzB,CAAC,CAAC,QAAQ,EAAE,KAAK,KAAK,SAAS;gBAC7B,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE;gBAC3B,CAAC,CAAC,EAAE,CAAC;KACV,CAAC,CAAA;IAEF,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;IACjC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;QAAE,OAAM;IAC1C,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,WAAW,CAAA;IAC/B,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACtC,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAA;IACzC,CAAC;IACD,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;AAC5B,CAAC;AASD,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAc,EACd,KAAa,EACb,QAAgB;IAEhB,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IACtC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,aAAa,EAAE;QAC5C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC;KAC/D,CAAC,CAAA;IACF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAO/C,CAAA;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,IAAI,iBAAiB,GAAG,CAAC,MAAM,GAAG,CAAC,CAAA;IAC/E,CAAC;IACD,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,KAAK,SAAS;YAChC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;YAC5B,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;KACpC,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAc,EACd,YAAoB;IAEpB,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IACtC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,eAAe,EAAE;QAC9C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;KACtD,CAAC,CAAA;IACF,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAM/C,CAAA;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,IAAI,yBAAyB,GAAG,CAAC,MAAM,GAAG,CAAC,CAAA;IACvF,CAAC;IACD,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzE,CAAA;AACH,CAAC"}

package/dist/commands/add.js

@@ -86,7 +86,7 @@ function printDomainNextSteps(cwd, domain) {
         "supatype self-host compose up -d   # Kong provisions HTTPS automatically",
         `Platform URL: https://${domain}`,
     ]);
-    plain("  App, REST, Auth, Storage, Realtime, Functions, and Studio — one HTTPS domain.");
+    plain("  App, REST, Auth, Storage, Realtime, Functions, and Studio, one HTTPS domain.");
     plain("  Certificates persist in the valkey-data volume.\n");
 }
 //# sourceMappingURL=add.js.map